cedar-policy 4.10.0

Cedar is a language for defining permissions as policies, which describe who should have access to what.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

type Address = {
    "street": String,
    "city": String,
    "zipcode": String
};

type decimal = {
    "wholeValue": __cedar::Long,
    "decimalPart": __cedar::Long
};

type ContactInfo = {
    "email": String,
    "phone"?: String,
    "address": Address
};

type UserPermissions = Set<__cedar::String>;

entity User = {
    "contact": ContactInfo,
    "permissions": UserPermissions,
    "active": Bool
};

action updateContact appliesTo {
    principal: [User],
    resource: [User],
    context: {
        "reason": __cedar::String,
        "timestamp": Long,
        "shadowedScore": decimal,
        "score": __cedar::decimal
    }
};