Update rbac roles & policies to match new model

iotbzh · Nov 19, 2020 · cdd4764 · cdd4764
1 parent 8ae6af2
commit cdd4764
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/rbac_iotbzh.conf b/rbac_iotbzh.conf
@@ -6,9 +6,10 @@ p = sub, obj, act
 
 [role_definition]
 g = _, _
+g2 = _, _
 
 [policy_effect]
 e = some(where (p.eft == allow))
 
 [matchers]
-m = g(r.sub, p.sub) && regexMatch(r.obj, p.obj) && r.act == p.act
+m = g(r.sub, p.sub) && g2(r.obj, p.obj) && regexMatch(r.act, p.act)