Bryan Frimin 9b6bee4a27 Introduce policy.Attributes and policy.AttributesByID aliases ...

These aliases (`map[string]string` and `map[gid.GID]Attributes`) give
batch authorization call sites readable types when loading and
returning per-resource condition attributes. ConditionContext now uses
the alias instead of the bare map type, with no behavior change.

Also extend policy tests to cover ResourcePattern.MatchesResource,
comma-separated value handling for In/NotIn, unresolved-reference
fallthrough, and resolveKey/resolveValue.

Signed-off-by: Bryan Frimin <bryan@probo.com>

2026-05-23 13:31:35 -07:00

6.1 KiB

Raw Blame History

View Raw