diff --git a/rbac.rego b/rbac.rego index 9704590..72b7f10 100644 --- a/rbac.rego +++ b/rbac.rego @@ -1,40 +1,39 @@ default allow = false allow { - input.role == "admin" + input.role == "rohansrma" } allow { - input.role == "moderator" - input.action == "create_post" + input.role == "purgerSpecial" + input.action == "delete_post" } allow { - input.role == "moderator" - input.action == "edit_post" + input.role == "purger" + input.action == "change_post" input.post.author != input.user } allow { - input.role == "general_user" - input.action == "create_post" - input.post.author == input.user + input.role == "purger" + input.action == "can_post" + input.post.author != input.user } allow { - input.role == "general_user" - input.action == "read_post" + input.role == "some_user" + input.action == "create_post" + input.post.author == input.user } allow { - input.role == "general_user" - input.post.author == input.user - input.action == "delete_post" - input.post.author == input.user + input.role == "some_user" + input.action == "read_post" } allow { - input.role == "general_user" + input.role == "some_user" input.post.author == input.user input.action == "edit_post" input.post.author == input.user