Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Verification and preparation for plugin

...

  1. Atlas policy resource can have resource as : taxonomy, entity, type, operation and term.


  2. Each resource field can take in multiple values.

  3. Include/exclude flag is specified at this resource level, default is include.  By turning the flag to exclude inverts the resource definition.
    1. For example, if you have a resource setup as follows: Taxonomy=CompanyName, Term=Finance.  and Term level is set to Exclude, then it means that means the resource is effectively referring to all Terms of Taxonomy CompanyName except the Term Finance.
      Note: As part of 0.6 release, all resources of Atlas supports * for resources only. More granular level of access control is planned for next release.  

    2. Use excludes flag in resource definition when it makes simplifies the policy definition.  Indiscriminate use of include/exclude flag can make reasoning about authorization challenging.



  4. Auditing is specified at the resource level.

Policy Item(s)

 Each policy can have zero or multiple policy items.

...