6 replies

Field Policy with Multiple conditions

Ash✅Solved🔒Policies

Hi all,

I want to express a field policy that grants access if the actor meets condition

(A or B) and (C or D)

(A or B) and (C or D)

are all modules implementing filter checks, so using

expr(A or B)

expr(A or B)

does not work. I also don't think this can be written as a sequential series of

authorize_if X

authorize_if X

forbid_unless Y

forbid_unless Y

etc.

Is there a way to write

authorize_if A or B

authorize_if A or B

authorize_if A and B

authorize_if A and B

?

Thanks in advance!

Solution

You can group them under one main condition with

policy_group

policy_group

policy_group Condition do
  policy always() do
    authorize_if A
    authorize_if B 
  end
  
  policy always() do
    authorize_if C
    authorize_if D 
  end
end

policy_group Condition do
  policy always() do
    authorize_if A
    authorize_if B 
  end
  
  policy always() do
    authorize_if C
    authorize_if D 
  end
end

Jump to solution

Ash Framework•3mo ago•

6 replies

Aron Zwaan

Field Policy with Multiple conditions

Ash✅Solved🔒Policies

Hi all,

I want to express a field policy that grants access if the actor meets condition

(A or B) and (C or D)

(A or B) and (C or D)

are all modules implementing filter checks, so using

expr(A or B)

expr(A or B)

does not work. I also don't think this can be written as a sequential series of

authorize_if X

authorize_if X

forbid_unless Y

forbid_unless Y

etc.

Is there a way to write

authorize_if A or B

authorize_if A or B

authorize_if A and B

authorize_if A and B

?

Thanks in advance!

Solution

You can group them under one main condition with

policy_group

policy_group

policy_group Condition do
  policy always() do
    authorize_if A
    authorize_if B 
  end
  
  policy always() do
    authorize_if C
    authorize_if D 
  end
end

policy_group Condition do
  policy always() do
    authorize_if A
    authorize_if B 
  end
  
  policy always() do
    authorize_if C
    authorize_if D 
  end
end

Jump to solution

Field Policy with Multiple conditions

Similar Threads

Field Policy with Multiple conditions

Similar Threads

Similar Threads

Similar Threads