Add condition to RoleRule

Signed-off-by: Andrew Haines <[email protected]>
cerbos · Jan 20, 2025 · 63130ae · 63130ae
1 parent e32163b
commit 63130ae
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 0 deletions.
diff --git a/docs/core.rolerule.md b/docs/core.rolerule.md
@@ -55,6 +55,25 @@ string\[\]
 **_(ALPHA)_**
 
 
+</td></tr>
+<tr><td>
+
+[condition?](./core.rolerule.condition.md)
+
+
+</td><td>
+
+
+</td><td>
+
+[Condition](./core.condition.md) \| undefined
+
+
+</td><td>
+
+**_(ALPHA)_** _(Optional)_
+
+
 </td></tr>
 <tr><td>
 

diff --git a/packages/core/src/convert/toProtobuf.ts b/packages/core/src/convert/toProtobuf.ts
@@ -456,10 +456,12 @@ function rolePolicyToProtobuf({
 function roleRuleToProtobuf({
   resource,
   allowActions,
+  condition,
 }: RoleRule): RoleRuleProtobuf {
   return {
     resource,
     allowActions,
+    condition: condition && conditionToProtobuf(condition),
   };
 }
 

diff --git a/packages/core/src/types/external/RoleRule.ts b/packages/core/src/types/external/RoleRule.ts
@@ -1,8 +1,13 @@
+import type { Condition } from "./Condition";
+
 /** @alpha */
 export interface RoleRule {
   /** @alpha */
   resource: string;
 
   /** @alpha */
   allowActions: string[];
+
+  /** @alpha */
+  condition?: Condition | undefined;
 }