chore: document RBAC usage#14065
Conversation
This comment was marked as outdated.
This comment was marked as outdated.
Emyrk
left a comment
There was a problem hiding this comment.
This overall looks good. The one missing piece is RBACObject() and the organizational scoping.
Something to note, if you use InOrg(), then you must be a member of the organization as well. What this means is if you have the user Alice make a workspace Worble in organization Orange, and Alice leaves the org, she can no longer use the workspace.
Despite having the user permission to do so.
This is stated here in the rego:
Lines 241 to 243 in ceffff9
So the truth table for not being in an org (if the resource belongs to an org) has a Negative in the Org column.
|
@johnstcn thanks for reopening; I'll try get to this today or tomorrow. |
Signed-off-by: Danny Kopping <danny@coder.com>
- Truth table had an incorrect result value in final row - Permission format examples was missing the object type - Fix actions list - Code block a bash command
Co-authored-by: Steven Masley <Emyrk@users.noreply.github.com>
Signed-off-by: Danny Kopping <danny@coder.com>
753e3e2 to
cf25746
Compare
johnstcn
left a comment
There was a problem hiding this comment.
👍 Thanks for taking this on @dannykopping !
Co-authored-by: Cian Johnston <cian@coder.com>
Co-authored-by: Steven Masley <Emyrk@users.noreply.github.com>
Signed-off-by: Danny Kopping <danny@coder.com>
Uses #14055 (credit to @johnstcn!) as a reference to demonstrate the use of the RBAC system.