0

I have following policies:

p, alice, /alice_data/:id/using, GET
p, bob, /alice_data/*, GET

My current enforcer enforcement result:

alice, /alice_data/hello, GET  ->  True
bob, /alice_data/123/using, GET -> True

I need to block bob for /alice_data/:id/using

alice, /alice_data/hello, GET  ->  i want it to be True
bob, /alice_data/123/using, GET -> i want it to be **False**

since /alice_data/123/using is a subset of /alice_data/* , but i want to block bob for /alice_data/123/using, can I do that ?? please guide

ratnesh
  • 436
  • 1
  • 5
  • 16

1 Answers1

1

To control whether /alice_data/123/using matches /alice_data/*, you need to use regexMatch or define your own keyMatch: https://casbin.org/docs/en/function

hsluoyz
  • 2,739
  • 5
  • 35
  • 59