refactor: combine cedar policies and add tests

1 files changed, 11 insertions, 40 deletions

diff --git a/pkg/policies/rest.cedar b/pkg/policies/rest.cedar
index a8896849..c6c4f745 100644
--- a/pkg/policies/rest.cedar
+++ b/pkg/policies/rest.cedar
@@ -1,41 +1,12 @@
 permit (
-    principal == Subject::"*",
-    action == Action::"GET",
-    resource in Path::"/projects.json"
-);
-
-permit (
-    principal == Subject::"gid://User/1",
-    action == Action::"GET",
-    resource in Path::"/*.json"
-);
-
-permit (
-    principal == Subject::"gid://User/1",
-    action == Action::"POST",
-    resource in Path::"/*.json"
-);
-
-permit (
-    principal == Subject::"gid://User/1",
-    action == Action::"PUT",
-    resource in Path::"/*.json"
-);
-
-permit (
-    principal == Subject::"gid://User/1",
-    action == Action::"PATCH",
-    resource in Path::"/*.json"
-);
-
-permit (
-    principal == Subject::"gid://User/1",
-    action == Action::"DELETE",
-    resource in Path::"/*.json"
-);
-
-permit (
-    principal == Subject::"gid://User/1",
-    action == Action::"HEAD",
-    resource in Path::"/*.json"
-);
+  principal == User::"1",
+  action in [
+    HttpMethod::"GET",
+    HttpMethod::"POST",
+    HttpMethod::"PUT",
+    HttpMethod::"PATCH",
+    HttpMethod::"DELETE",
+    HttpMethod::"HEAD"
+  ],
+  resource
+) when { context.host == "api.example.com" };