cyberark-conjur-cli-docker-based
cyberark-conjur-cli-docker-based copied to clipboard
cyberark
Locally validate policy before sending
This is related to conjurinc/possum#33 -- the CLI could notice the problem without contacting the server and provide better and faster diagnostics. It could also perform further verification: even if not fully policy parsing (to avoid cases when there's a new policy feature on server and you need to update the CLI to use it), it could at least validate it's YAML.
Why not just let the server do it? If we do this in the client, we create a situation where clients written in other languages have less functionality.
We can add cukes to the server suite that better test the policy error conditions.
The server already does it currently, which it should and which it should.
The idea is to have some rudimentary checks to catch things like wrong filename etc. It's a UX feature of the CLI, so I don't think feature parity between implementations is relevant here.
10 lip 2017 17:06 "Kevin Gilpin" [email protected] napisał(a):
Why not just let the server do it? If we do this in the client, we create a situation where clients written in other languages have less functionality.
We can add cukes to the server suite that better test the policy error conditions.
— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/conjurinc/cli-ruby/issues/167#issuecomment-314134760, or mute the thread https://github.com/notifications/unsubscribe-auth/AAyRVJvSDaFwcTKOkdGlN02cK2AmDquJks5sMj3igaJpZM4ONHIQ .