Hey, is it possible to match a subject name with wildcards like keyMatch2 does?
I would like to define a policy that applies to everyone.
# sub dom obj act
p, role/chronicle.creator, chronicle/*, chronicle/*, create
# r.sub p.sub dom
g, user/*, role/chronicle.creator, chronicle/*
[request_definition]
r = sub, dom, obj, act
[policy_definition]
p = sub, dom, obj, act
[policy_effect]
e = some(where (p.eft == allow))
[role_definition]
g = _, _, _
# User to role mapping, with domain support
[matchers]
m = g(r.sub, p.sub, r.dom) && \
keyMatch2(r.dom, p.dom) && \
keyMatch2(r.obj, p.obj) && \
(r.act == p.act || p.act == "*")
But obviously I can't just stick in keyMatch2 like I use for the other fields as I need the graph/grouping (g) to resolve for groups/roles
