Skip to content

3 is authorized - #4

Merged
luxas merged 3 commits into
2-schemafrom
3-is-authorized
Sep 26, 2026
Merged

luxas merged 3 commits into
2-schemafrom
3-is-authorized

Conversation

@luxas

@luxas luxas commented Sep 13, 2026

Copy link
Copy Markdown
Owner

Stack created with GitHub Stacks CLI • Give Feedback 💬

luxas and others added 3 commits September 13, 2026 22:33
`SqlAuthorizer` validates the policies, partially evaluates them with the
request and the action entities known, compiles the residuals with the
three-valued encoding (NULL is an error; CASE forms for the boolean
operators, guarded arithmetic, tags as correlated subqueries, `in` on the
closed hierarchy table or a recursive ancestors CTE) over one CTE per root
with a LEFT JOIN per attribute path, and rebuilds the decision, the
determining policies and the erroring policies from the row. Database
errors now carry the server's message. Tests compare every case with
`cedar_policy::Authorizer`.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JSRPugoPu8zLyykBCW6QJh
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JSRPugoPu8zLyykBCW6QJh
@luxas
luxas added this pull request to stack #8 September 13, 2026 20:58
@luxas
luxas marked this pull request as ready for review September 26, 2026 09:54
@luxas
luxas merged commit 7a6b2c3 into main Sep 26, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant