diff --git a/modules/identity/policies/identity.yaml b/modules/identity/policies/identity.yaml deleted file mode 100644 index 86f22db..0000000 --- a/modules/identity/policies/identity.yaml +++ /dev/null @@ -1,47 +0,0 @@ -# yaml-language-server: $schema=https://api.cerbos.dev/latest/cerbos/policy/v1/Policy.schema.json -# docs: https://docs.cerbos.dev/cerbos/latest/policies/resource_policies - -apiVersion: api.cerbos.dev/v1 -resourcePolicy: - resource: identity - version: default - rules: - - ### Read - - - actions: - - read - effect: EFFECT_ALLOW - roles: - - admin - - - actions: - - read - effect: EFFECT_ALLOW - roles: - - user - condition: - match: - expr: request.resource.id == request.principal.id - - ### Update - - - actions: - - update - effect: EFFECT_ALLOW - roles: - - user - condition: - match: - expr: request.resource.id == request.principal.id - - ### Delete - - - actions: - - delete - effect: EFFECT_ALLOW - roles: - - user - condition: - match: - expr: request.resource.id == request.principal.id