Authorization Examples

httpapi_authz.rego

package httpapi.authz

default allow = false

# Allow users to get their own salaries.
allow {
    input.method = "GET"
    input.path = ["finance", "salary", user]
    user = input.user
}

# Allow managers to get their subordinates' salaries.
allow {
    input.method = "GET"
    input.path = ["finance", "salary", user]
    manager_of[user] = input.user
}