Closed imdominicreed closed 2 weeks ago
Verified that we have a test in the policy so we can focus on GetDecision or the SubjectMapping https://github.com/opentdf/platform/blob/main/service/integration/attribute_fqns_test.go#L136-L159
Need to update these to use strings.EqualFold()
TDF Policy Data Attributes seem to be case sensitive and do not get normalized to lower case when doing a keyRewrap, and authorization of getDecision.
If the TDF Policy Data Attributes is created with cases (example being:
https://example.com/attr/Caps/value/Bad
), the request will get denied even if the user is entitled withhttps://example.com/attr/caps/value/bad
.Steps to Reproduce:
https://example.com/attr/Caps/value/Bad
.The request should be a denied by Platform.