wow-query/me.ahoo.wow.query.snapshot.filter/AbacQueryOptions

AbacQueryOptions

data class AbacQueryOptions(val requirePrincipalTags: Boolean = false, val matchMissingTagKey: Boolean = true)

The optional tightenings of AbacQueryPolicy. The defaults keep its permissive semantics.

Constructors

AbacQueryOptions

constructor(requirePrincipalTags: Boolean = false, matchMissingTagKey: Boolean = true)

Types

Companion

object Companion

Properties

matchMissingTagKey

val matchMissingTagKey: Boolean

lets a resource that lacks one of the principal's tag keys (or has it empty) match, as a public resource. Off, a resource matches only when it carries every non-wildcard key with a value the principal holds.

requirePrincipalTags

val requirePrincipalTags: Boolean

rejects an HTTP snapshot query whose principal has no ABAC tags, instead of letting it match every resource. In-process queries are trusted and never rejected for this.