-
Notifications
You must be signed in to change notification settings - Fork 232
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(iam): conditions MTA-5686 #4532
base: main
Are you sure you want to change the base?
Conversation
pages/iam/reference-content/understanding-policy-conditions.mdx
Outdated
Show resolved
Hide resolved
pages/iam/reference-content/understanding-policy-conditions.mdx
Outdated
Show resolved
Hide resolved
pages/iam/reference-content/understanding-policy-conditions.mdx
Outdated
Show resolved
Hide resolved
pages/iam/reference-content/understanding-policy-conditions.mdx
Outdated
Show resolved
Hide resolved
pages/iam/reference-content/understanding-policy-conditions.mdx
Outdated
Show resolved
Hide resolved
pages/iam/reference-content/understanding-policy-conditions.mdx
Outdated
Show resolved
Hide resolved
Co-authored-by: Nathanael Demacon <[email protected]> Co-authored-by: Rowena Jones <[email protected]> Co-authored-by: Néda <[email protected]>
pages/iam/reference-content/understanding-policy-conditions.mdx
Outdated
Show resolved
Hide resolved
pages/iam/reference-content/understanding-policy-conditions.mdx
Outdated
Show resolved
Hide resolved
pages/iam/reference-content/understanding-policy-conditions.mdx
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Tremendous work!
It could be useful to have a link to the String functions as we already have one to the Date/Time functions since we use some in the examples: https://github.com/google/cel-spec/blob/master/doc/langdef.md#string-functions |
### Multiple policies | ||
If multiple policies with different conditions apply to the same principal, the presence of a single policy with met conditions (or no conditions) will override any denying rules from other policies, allowing the action to be taken. | ||
|
||
For example, if you set up a policy that grants access to a resource only on Monday while another policy grants access only on Tuesday, the action will still be permitted on Monday. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'd clarify this by saying that the action can be performed on both Monday and Tuesday.
No description provided.