aboutsummaryrefslogtreecommitdiff
path: root/manifests/base/auth_model.ini
diff options
context:
space:
mode:
authorMax Resnick <max@ofmax.li>2025-06-15 22:10:32 -0700
committerMax Resnick <max@ofmax.li>2025-06-15 22:10:32 -0700
commit1b47046a96cb6dd344cbaf7c215420a829e6d4df (patch)
tree5501a1078935e788c6b744f6f2516bdfe6e4a372 /manifests/base/auth_model.ini
parent0439fdf82e66df8e03433afe849c1ff4ec18c38f (diff)
downloadgo-git-server-1b47046a96cb6dd344cbaf7c215420a829e6d4df.tar.gz
feat: refactor of kustomization.yml
Diffstat (limited to '')
-rw-r--r--manifests/base/auth_model.ini14
1 files changed, 14 insertions, 0 deletions
diff --git a/manifests/base/auth_model.ini b/manifests/base/auth_model.ini
new file mode 100644
index 0000000..9ca4b92
--- /dev/null
+++ b/manifests/base/auth_model.ini
@@ -0,0 +1,14 @@
+[request_definition]
+r = sub, obj, act
+
+[policy_definition]
+p = sub, obj, act
+
+[role_definition]
+g = _, _
+
+[policy_effect]
+e = some(where (p.eft == allow))
+
+[matchers]
+m = g(r.sub, p.sub) && r.obj == p.obj && r.act == p.act