Contents

module Conjur::Policy::Types
  class Deny < Base

    self.description = %(
Deny privileges on a [Resource](#reference/resource). (compare:
[Revoke](#reference/revoke) for [Roles](#reference/role))
)

    self.example = %(
- !variable secret
- !user rando
- !deny
    role: !user rando
    privilege: read
    resource: !variable secret
)

    attribute :role, kind: :role, dsl_accessor: true
    attribute :privilege, kind: :string, dsl_accessor: true
    attribute :resource, dsl_accessor: true
        
    include ResourceMemberDSL

    def to_s
      "Deny #{role} to '#{privilege}' #{resource}"
    end
  end
end

Version data entries

5 entries across 5 versions & 1 rubygems

Version	Path
conjur-asset-policy-0.8.3	lib/conjur/policy/types/deny.rb
conjur-asset-policy-0.8.2	lib/conjur/policy/types/deny.rb
conjur-asset-policy-0.8.1	lib/conjur/policy/types/deny.rb
conjur-asset-policy-0.8.0	lib/conjur/policy/types/deny.rb
conjur-asset-policy-0.7.1	lib/conjur/policy/types/deny.rb