opentdf / platform

Persistent data centric security that extends owner control wherever data travels
BSD 3-Clause Clear License
19 stars 11 forks source link

KAS and autoconfigure SDK logic should support KAS grants to attribute namespaces #1456

Closed jakedoublev closed 1 month ago

jakedoublev commented 3 months ago

Background

Due to the decision in https://github.com/opentdf/platform/issues/1296, KAS Grants are supported within policy from a registered KAS to an attribute namespace.

KAS and SDK logic should support these grants alongside existing definition and value grants.

Acceptance Criteria

  1. [dependency] otdfctl work is completed to inspect grants on namespaces
  2. Grants to namespaces can be retrieved and applied on encrypt
  3. Grants to namespaces can be retrieved and applied on decrypt
  4. tests
jakedoublev commented 1 month ago

resolved by https://github.com/opentdf/platform/pull/1512 and https://github.com/opentdf/otdfctl/pull/292