Skip to content

AZ104: A permission written wrongly ​

A permission is can name = expression: can view = owner or editor or parent.view.

Reported when the policy is compiled: rowfence check, the editor, rowfence dev.

The mistake ​

authz
app role app_user
type user = app.users
type folder = app.folders
  owner : user = owner_id
  can view owner
line 5: write permissions as: can name = expression [AZ104]

Fixed ​

authz
app role app_user
type user = app.users
type folder = app.folders
  owner : user = owner_id
  can view = owner