Skip to content

Commit

Permalink
feat(core): GetEntitlements with_comprehensive_hierarchy (#1121)
Browse files Browse the repository at this point in the history
If a hierarchy attribute is entitled, lower entitlements are added as
well when `with_comprehensive_hierarchy` is set in GetEntitlements

Hierarchy order is determined by creation order
Creation order is guaranteed unless unsafe operations used
```
  // WARNING!!
  // Unsafe reordering requires the full list of values in the new order they should be stored. Updating the order of values in a HIERARCHY-rule Attribute Definition
  // will retroactively alter access to existing TDFs containing those values. Replacing values on an attribute in place is not supported; values can be unsafely deleted
  // deleted, created, and unsafely re-ordered as necessary.
  ```

If the above is not followed, then you will have a very bad day

resolves #1054
  • Loading branch information
pflynn-virtru authored Jul 11, 2024
1 parent 4a17f18 commit ac85bf7
Show file tree
Hide file tree
Showing 6 changed files with 244 additions and 89 deletions.
7 changes: 7 additions & 0 deletions docs/grpc/index.html

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

7 changes: 7 additions & 0 deletions docs/openapi/authorization/authorization.swagger.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading

0 comments on commit ac85bf7

Please sign in to comment.