File tree Expand file tree Collapse file tree 1 file changed +6
-4
lines changed
policy/diamond/policy/admin Expand file tree Collapse file tree 1 file changed +6
-4
lines changed Original file line number Diff line number Diff line change @@ -5,10 +5,12 @@ import rego.v1
55
66is_admin[subject] := " super_admin" in data.diamond.data.subjects[subject].permissions
77
8- beamline_admin_for_subject[subject] contains beamline if {
9- some subject
10- some role in data.diamond.data.subjects[subject].permissions
11- some beamline in data.diamond.data.admin[role]
8+ beamline_admin_for_subject[subject_name] contains beamline if {
9+ some subject_name, subject in data.diamond.data.subjects
10+ some subject_role in subject.permissions
11+ some role, role_beamlines in data.diamond.data.admin
12+ subject_role == role
13+ some beamline in role_beamlines
1214}
1315
1416admin := is_admin[token.claims.fedid] # regal ignore:rule-name-repeats-package
You can’t perform that action at this time.
0 commit comments