@cynodia/axiom-server 0.15.0-alpha.1 → 0.15.0-alpha.3

package/conformance/authenticated-client-rejects-system-only-action.json

@@ -13,7 +13,7 @@
     "contract": "axiom.server.v4",
     "id": "conformance-integrations",
     "name": "Conformance integrations",
-    "version": "0.8.2",
+    "version": "0.15.0",
     "entities": [
       {
         "id": "entity_effect_outcome",

package/conformance/authorization/action-allow-deny-anonymous.json

@@ -58,6 +58,15 @@
       "field_user_id": "u-nob",
       "field_user_role": "viewer",
       "field_user_tenant": "t1"
+    },
+    "banned": {
+      "field_user_id": "u-ban",
+      "field_user_role": "banned",
+      "field_user_tenant": "t1"
+    },
+    "norole": {
+      "field_user_id": "u-nr",
+      "field_user_tenant": "t1"
     }
   },
   "steps": [
@@ -94,7 +103,7 @@
     "contract": "axiom.server.v9",
     "id": "authz-conformance",
     "name": "Authorization Conformance",
-    "version": "0.15.0-alpha.1",
+    "version": "0.15.0-alpha.3",
     "entities": [
       {
         "id": "entity_user",
@@ -147,6 +156,14 @@
               "primitive": "string"
             },
             "required": true
+          },
+          {
+            "id": "field_doc_owner",
+            "valueType": {
+              "kind": "primitive",
+              "primitive": "string"
+            },
+            "required": false
           }
         ]
       },
@@ -236,6 +253,17 @@
           "required": true
         }
       },
+      "field_doc_owner": {
+        "entityId": "entity_doc",
+        "field": {
+          "id": "field_doc_owner",
+          "valueType": {
+            "kind": "primitive",
+            "primitive": "string"
+          },
+          "required": false
+        }
+      },
       "field_note_id": {
         "entityId": "entity_note",
         "field": {
@@ -383,6 +411,62 @@
         "preconditions": [],
         "failureModes": []
       },
+      "action_denylist": {
+        "id": "action_denylist",
+        "kind": "action",
+        "authorizationPolicy": "policy_denylist",
+        "operations": [
+          {
+            "kind": "set",
+            "target": {
+              "kind": "state",
+              "stateId": "state_count"
+            },
+            "value": {
+              "kind": "binary",
+              "operator": "add",
+              "left": {
+                "kind": "ref",
+                "targetId": "state_count"
+              },
+              "right": {
+                "kind": "literal",
+                "value": 1
+              }
+            }
+          }
+        ],
+        "preconditions": [],
+        "failureModes": []
+      },
+      "action_owner": {
+        "id": "action_owner",
+        "kind": "action",
+        "authorizationPolicy": "policy_owner",
+        "operations": [
+          {
+            "kind": "set",
+            "target": {
+              "kind": "state",
+              "stateId": "state_count"
+            },
+            "value": {
+              "kind": "binary",
+              "operator": "add",
+              "left": {
+                "kind": "ref",
+                "targetId": "state_count"
+              },
+              "right": {
+                "kind": "literal",
+                "value": 1
+              }
+            }
+          }
+        ],
+        "preconditions": [],
+        "failureModes": []
+      },
       "action_step": {
         "id": "action_step",
         "kind": "action",
@@ -414,6 +498,214 @@
         ],
         "preconditions": [],
         "failureModes": []
+      },
+      "action_legacy_neq": {
+        "id": "action_legacy_neq",
+        "kind": "action",
+        "authorization": {
+          "kind": "binary",
+          "operator": "neq",
+          "left": {
+            "kind": "field",
+            "source": {
+              "kind": "ref",
+              "targetId": "axiom_principal"
+            },
+            "fieldId": "field_user_role"
+          },
+          "right": {
+            "kind": "literal",
+            "value": "banned"
+          }
+        },
+        "operations": [
+          {
+            "kind": "set",
+            "target": {
+              "kind": "state",
+              "stateId": "state_count"
+            },
+            "value": {
+              "kind": "binary",
+              "operator": "add",
+              "left": {
+                "kind": "ref",
+                "targetId": "state_count"
+              },
+              "right": {
+                "kind": "literal",
+                "value": 1
+              }
+            }
+          }
+        ],
+        "preconditions": [],
+        "failureModes": []
+      },
+      "action_legacy_noteq": {
+        "id": "action_legacy_noteq",
+        "kind": "action",
+        "authorization": {
+          "kind": "unary",
+          "operator": "not",
+          "operand": {
+            "kind": "binary",
+            "operator": "eq",
+            "left": {
+              "kind": "field",
+              "source": {
+                "kind": "ref",
+                "targetId": "axiom_principal"
+              },
+              "fieldId": "field_user_role"
+            },
+            "right": {
+              "kind": "literal",
+              "value": "banned"
+            }
+          }
+        },
+        "operations": [
+          {
+            "kind": "set",
+            "target": {
+              "kind": "state",
+              "stateId": "state_count"
+            },
+            "value": {
+              "kind": "binary",
+              "operator": "add",
+              "left": {
+                "kind": "ref",
+                "targetId": "state_count"
+              },
+              "right": {
+                "kind": "literal",
+                "value": 1
+              }
+            }
+          }
+        ],
+        "preconditions": [],
+        "failureModes": []
+      },
+      "action_legacy_true": {
+        "id": "action_legacy_true",
+        "kind": "action",
+        "authorization": {
+          "kind": "literal",
+          "value": true
+        },
+        "operations": [
+          {
+            "kind": "set",
+            "target": {
+              "kind": "state",
+              "stateId": "state_count"
+            },
+            "value": {
+              "kind": "binary",
+              "operator": "add",
+              "left": {
+                "kind": "ref",
+                "targetId": "state_count"
+              },
+              "right": {
+                "kind": "literal",
+                "value": 1
+              }
+            }
+          }
+        ],
+        "preconditions": [],
+        "failureModes": []
+      },
+      "action_legacy_admin": {
+        "id": "action_legacy_admin",
+        "kind": "action",
+        "authorization": {
+          "kind": "binary",
+          "operator": "eq",
+          "left": {
+            "kind": "field",
+            "source": {
+              "kind": "ref",
+              "targetId": "axiom_principal"
+            },
+            "fieldId": "field_user_role"
+          },
+          "right": {
+            "kind": "literal",
+            "value": "admin"
+          }
+        },
+        "operations": [
+          {
+            "kind": "set",
+            "target": {
+              "kind": "state",
+              "stateId": "state_count"
+            },
+            "value": {
+              "kind": "binary",
+              "operator": "add",
+              "left": {
+                "kind": "ref",
+                "targetId": "state_count"
+              },
+              "right": {
+                "kind": "literal",
+                "value": 1
+              }
+            }
+          }
+        ],
+        "preconditions": [],
+        "failureModes": []
+      },
+      "action_legacy_plus_policy": {
+        "id": "action_legacy_plus_policy",
+        "kind": "action",
+        "authorization": {
+          "kind": "binary",
+          "operator": "neq",
+          "left": {
+            "kind": "field",
+            "source": {
+              "kind": "ref",
+              "targetId": "axiom_principal"
+            },
+            "fieldId": "field_user_role"
+          },
+          "right": {
+            "kind": "literal",
+            "value": "banned"
+          }
+        },
+        "authorizationPolicy": "policy_op",
+        "operations": [
+          {
+            "kind": "set",
+            "target": {
+              "kind": "state",
+              "stateId": "state_count"
+            },
+            "value": {
+              "kind": "binary",
+              "operator": "add",
+              "left": {
+                "kind": "ref",
+                "targetId": "state_count"
+              },
+              "right": {
+                "kind": "literal",
+                "value": 1
+              }
+            }
+          }
+        ],
+        "preconditions": [],
+        "failureModes": []
       }
     },
     "constraints": [],
@@ -594,6 +886,50 @@
           "kind": "literal",
           "value": false
         }
+      },
+      {
+        "id": "policy_denylist",
+        "kind": "authorization-policy",
+        "allow": {
+          "kind": "binary",
+          "operator": "neq",
+          "left": {
+            "kind": "field",
+            "source": {
+              "kind": "ref",
+              "targetId": "axiom_principal"
+            },
+            "fieldId": "field_user_role"
+          },
+          "right": {
+            "kind": "literal",
+            "value": "banned"
+          }
+        }
+      },
+      {
+        "id": "policy_owner",
+        "kind": "authorization-policy",
+        "allow": {
+          "kind": "binary",
+          "operator": "eq",
+          "left": {
+            "kind": "field",
+            "source": {
+              "kind": "ref",
+              "targetId": "axiom_resource"
+            },
+            "fieldId": "field_doc_owner"
+          },
+          "right": {
+            "kind": "field",
+            "source": {
+              "kind": "ref",
+              "targetId": "axiom_principal"
+            },
+            "fieldId": "field_user_id"
+          }
+        }
       }
     ],
     "workflows": [