oci-cis-landingzone-quickstart icon indicating copy to clipboard operation
oci-cis-landingzone-quickstart copied to clipboard

Published 20 hours ago • verified publisher icon oracle-quickstart

1.14 fails to recognize wildcard in policy

Open hslange opened this issue 2 years ago • 1 comments

My policies for storage admins do not allow to delete using the following constructs: allow group storage-admins to manage file-family in compartment xyz where request.permission != /DELETE/ or allow group storage-admins to manage file-family in compartment xyz where request.permission = <specific permission, like /UPDATE/> The scripts is not able to recognize this construct and reports in check 1.14 that this as non-compliant. Is it possible to extend the script to include such wildcard constructs?

hslange avatar Sep 19 '23 07:09 hslange

Ack. Being evaluated. Thanks.

andrecorreaneto avatar Nov 04 '23 14:11 andrecorreaneto