summaryrefslogtreecommitdiff
path: root/etc/authzd/policy1.cedar
diff options
context:
space:
mode:
Diffstat (limited to 'etc/authzd/policy1.cedar')
-rw-r--r--etc/authzd/policy1.cedar37
1 files changed, 0 insertions, 37 deletions
diff --git a/etc/authzd/policy1.cedar b/etc/authzd/policy1.cedar
deleted file mode 100644
index 966bbcfb..00000000
--- a/etc/authzd/policy1.cedar
+++ /dev/null
@@ -1,37 +0,0 @@
-permit (principal, action, resource)
-when
-{
- context has host &&
- context has method &&
- context has path &&
- ((context.host == "sparkle.runway.gitlab.net" ||
- context.host == "sparkle.staging.runway.gitlab.net" ||
- context.host like "localhost:*") &&
- ((context.method == "GET" &&
- (context.path == "/" ||
- context.path == "/callback" ||
- context.path == "/dashboard/nav" ||
- context.path == "/health" ||
- context.path == "/signout" ||
- context.path == "/sparkles")) ||
- (context.method == "POST" && (context.path == "/sparkles/restore"))))
-};
-
-permit (
- principal is User,
- action == Action::"POST",
- resource == Resource::"/sparkles"
-)
-when
-{
- context has host &&
- context.host == "sparkle.staging.runway.gitlab.net" &&
- principal has username
-};
-
-permit (
- principal == User::"1",
- action == Action::"GET",
- resource == Resource::"/dashboard"
-)
-when { context has host && context.host == "localhost:10000" };