Allow using computed fields in row-level permissions #5646
Labels
a/authz
Issues related to "authorization" and the policy engine after session claims are procesed
k/enhancement
New feature or improve an existing feature
It would be really helpful to be able to use computed fields where the only argument is the current table row in row level permissions. Currently, computed fields don't appear in the list.
This would allow you to set up something like select permissions on a
user
wherefull_name
equals "Bob" or whatever, assumingfull_name
is a computed field that uses only the current user row as input and just combines the row'sfirst_name
andlast_name
fields.In a more real example, this is particularly useful because it allows you to encapsulate complex permission logic into a single, reusable function, rather than being forced to manually add it through the console's permission ui which can get very tedious and difficult to test, especially in cases where you're repeating the same chunk of permissions across multiple roles and actions with only slight variations.
The text was updated successfully, but these errors were encountered: