hexa-org / policy-opa

Supports integration of Hexa IDQL Policy into OPA environments
Apache License 2.0
3 stars 1 forks source link

Update Object Match to match based on resource_id #5

Closed independentid closed 2 months ago

independentid commented 3 months ago

Current logic assumes a complex object assetId and pathSpec.

Based on the evolution of IDQL, we now just use resource_id.

In order to do this, the recommendation is to enhance opaTools ReqPrams struct to have the attribute Resource_ids []string. This allows the requesting app to ask about a specific resource(s). The reason for plural is to avoid constrain apps that might have multiple logical resources or just a simple name.