summaryrefslogtreecommitdiff
path: root/etc/authzd
diff options
context:
space:
mode:
Diffstat (limited to 'etc/authzd')
-rw-r--r--etc/authzd/policy0.cedar11
1 files changed, 1 insertions, 10 deletions
diff --git a/etc/authzd/policy0.cedar b/etc/authzd/policy0.cedar
index e1037457..a7a0ccb5 100644
--- a/etc/authzd/policy0.cedar
+++ b/etc/authzd/policy0.cedar
@@ -6,7 +6,7 @@ when {
permit(principal, action == Action::"check", resource)
when {
- context has path && (
+ context has path && context has method && context.method == "GET" && (
context.path like "*.css" ||
context.path like "*.js" ||
context.path like "*.ico" ||
@@ -30,15 +30,6 @@ when {
context.path == "/health" ||
context.path == "/signout" ||
context.path == "/sparkles" ||
- context.path like "*.bmp" ||
- context.path like "*.css" ||
- context.path like "*.gif" ||
- context.path like "*.html" ||
- context.path like "*.ico" ||
- context.path like "*.jpeg" ||
- context.path like "*.jpg" ||
- context.path like "*.js" ||
- context.path like "*.png" ||
context.path == "/callback"
)
) || (