summaryrefslogtreecommitdiff
path: root/etc/authzd
diff options
context:
space:
mode:
authormo khan <mo@mokhan.ca>2025-07-14 15:16:46 -0600
committermo khan <mo@mokhan.ca>2025-07-14 15:16:46 -0600
commit56276ca9000d0ada5c6412fcb6437024ae6358d7 (patch)
treef322e6785f63bcb290c4ff4977ba32b62e9b64c4 /etc/authzd
parentca96ce12f88b476c37cab853b62c0d603f073ec3 (diff)
feat: allow access to sparkle in development
Diffstat (limited to 'etc/authzd')
-rw-r--r--etc/authzd/policy1.cedar11
1 files changed, 11 insertions, 0 deletions
diff --git a/etc/authzd/policy1.cedar b/etc/authzd/policy1.cedar
index 15776ab7..6fe51b16 100644
--- a/etc/authzd/policy1.cedar
+++ b/etc/authzd/policy1.cedar
@@ -28,3 +28,14 @@ when
context.host == "sparkle.staging.runway.gitlab.net" &&
principal has username
};
+
+permit (
+ principal == User::"1",
+ action == Action::"GET",
+ resource == Resource::"/dashboard"
+)
+when
+{
+ context has host &&
+ context.host == "localhost:10000"
+};