From cdd476488c9cb9ee3fe26d75d20da2a6ec3f0033 Mon Sep 17 00:00:00 2001
From: Sebastien Douheret <sebastien.douheret@iot.bzh>
Date: Thu, 19 Nov 2020 18:57:00 +0100
Subject: [PATCH] Update rbac roles & policies to match new model

---
 rbac_iotbzh.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/rbac_iotbzh.conf b/rbac_iotbzh.conf
index fd302e9..44507a6 100644
--- a/rbac_iotbzh.conf
+++ b/rbac_iotbzh.conf
@@ -6,9 +6,10 @@ p = sub, obj, act
 
 [role_definition]
 g = _, _
+g2 = _, _
 
 [policy_effect]
 e = some(where (p.eft == allow))
 
 [matchers]
-m = g(r.sub, p.sub) && regexMatch(r.obj, p.obj) && r.act == p.act
+m = g(r.sub, p.sub) && g2(r.obj, p.obj) && regexMatch(r.act, p.act)