From 3dbd58536a4c37a2cc3b18572ac9e46bbd19d718 Mon Sep 17 00:00:00 2001 From: mo khan Date: Sat, 5 Jul 2025 11:45:17 -0600 Subject: feat: allow access from production sparkle --- etc/authzd/policy0.cedar | 31 ++++++++++++++++++------------- 1 file changed, 18 insertions(+), 13 deletions(-) (limited to 'etc') diff --git a/etc/authzd/policy0.cedar b/etc/authzd/policy0.cedar index a7a0ccb5..18a48476 100644 --- a/etc/authzd/policy0.cedar +++ b/etc/authzd/policy0.cedar @@ -22,19 +22,24 @@ when { permit(principal, action, resource) when { context has host && context has method && context has path && ( - context.host == "sparkle.staging.runway.gitlab.net" && ( - context.method == "GET" && ( - context.path == "/" || - context.path == "/callback" || - context.path == "/dashboard/nav" || - context.path == "/health" || - context.path == "/signout" || - context.path == "/sparkles" || - context.path == "/callback" - ) - ) || ( - context.method == "POST" && ( - context.path == "/sparkles/restore" + ( + context.host == "sparkle.staging.runway.gitlab.net" || + context.host == "sparkle.runway.gitlab.net" + ) && ( + ( + context.method == "GET" && ( + context.path == "/" || + context.path == "/callback" || + context.path == "/dashboard/nav" || + context.path == "/health" || + context.path == "/signout" || + context.path == "/sparkles" || + context.path == "/callback" + ) + ) || ( + context.method == "POST" && ( + context.path == "/sparkles/restore" + ) ) ) ) -- cgit v1.2.3