Skip to content

Commit 0caee4a

Browse files
committed
1 parent ff632a7 commit 0caee4a

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

policy/diamond/policy/admin/admin.rego

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,12 @@ import rego.v1
55

66
is_admin[subject] := "super_admin" in data.diamond.data.subjects[subject].permissions
77

8-
beamline_admin_for_subject[subject] contains beamline if {
9-
some subject
10-
some role in data.diamond.data.subjects[subject].permissions
11-
some beamline in data.diamond.data.admin[role]
8+
beamline_admin_for_subject[subject_name] contains beamline if {
9+
some subject_name, subject in data.diamond.data.subjects
10+
some subject_role in subject.permissions
11+
some role, role_beamlines in data.diamond.data.admin
12+
subject_role == role
13+
some beamline in role_beamlines
1214
}
1315

1416
admin := is_admin[token.claims.fedid] # regal ignore:rule-name-repeats-package

0 commit comments

Comments
 (0)