cerbos 0.5.0

Rust SDK for working with Cerbos: an open core, language-agnostic, scalable authorization solution
Documentation
---
apiVersion: api.cerbos.dev/v1
resourcePolicy:
  resource: foobar
  version: "default"
  rules:
    - actions: ["*"]
      effect: EFFECT_ALLOW
      roles:
        - admin
    - actions: ["view:*"]
      roles:
        - employee
      effect: EFFECT_ALLOW
    - actions: ["view:public"]
      roles:
        - employee
      effect: EFFECT_ALLOW
    - actions: ["approve"]
      condition:
        match:
          expr: request.resource.attr.status == "PENDING_APPROVAL"
      roles:
        - manager
      effect: EFFECT_ALLOW