test/policies/access_method/policy.rego


1
2
3
4
5
6
7
8
9
10
11
12
13

package access_method

import rego.v1

allow if {
        input.path == ["users"]
        input.method == "POST"
}

allow if {
        input.path == ["users", input.user_id]
        input.method == "GET"
}