summaryrefslogtreecommitdiff
path: root/etc/authzd/policy0.cedar
diff options
context:
space:
mode:
Diffstat (limited to 'etc/authzd/policy0.cedar')
-rw-r--r--etc/authzd/policy0.cedar21
1 files changed, 19 insertions, 2 deletions
diff --git a/etc/authzd/policy0.cedar b/etc/authzd/policy0.cedar
index 56457622..75cf8178 100644
--- a/etc/authzd/policy0.cedar
+++ b/etc/authzd/policy0.cedar
@@ -22,11 +22,28 @@ when {
permit(principal, action, resource)
when {
context has host && context has method && context has path && (
- context.host == "sparkle.staging.runway.gitlab.net" &&
+ context.host == "sparkle.staging.runway.gitlab.net" && (
context.method == "GET" && (
context.path == "/" ||
- context.path == "/app.js" ||
+ context.path == "/callback" ||
+ context.path == "/dashboard/nav" ||
+ context.path == "/health" ||
+ context.path == "/signout" ||
+ context.path == "/sparkles" ||
+ context.path like "*.bmp" ||
+ context.path like "*.css" ||
+ context.path like "*.gif" ||
+ context.path like "*.html" ||
+ context.path like "*.ico" ||
+ context.path like "*.jpeg" ||
+ context.path like "*.jpg" ||
+ context.path like "*.js" ||
+ context.path like "*.png" ||
context.path == "/callback"
)
+ ) || (
+ context.method == "POST" && (
+ context.path == "/sparkles/restore"
+ )
)
};