OpenConext / OpenConext-pdp

OpenConext implementation of a XACML based PDP engine for access policy enforcement
Apache License 2.0
8 stars 8 forks source link

Allowing access for multiple teams is always AND #13

Open baszoetekouw opened 7 years ago

baszoetekouw commented 7 years ago

When allowing access to multiple teams, the current behaviour seems to be that the user needs to be a member of all specified teams (rather than of at least one team), even though the rules are "OR" and the automatically generated description suggests that the user needs to be a member of either team.

I'm not entirely sure if this is intended or whether this is a bug. Either way, the UI is rather unclear on this point. If it is intended, than please add another way to allow access to more than one team.