Interface PlanResourcesUnconditionalResponse

A query plan for when the specified action is always allowed or denied for the principal on resources matching the input.

interface PlanResourcesUnconditionalResponse {
    cerbosCallId: string;
    kind: ALWAYS_ALLOWED | ALWAYS_DENIED;
    metadata: PlanResourcesMetadata | undefined;
    requestId: string;
    validationErrors: ValidationError[];
}

Properties

cerbosCallId: string

The unique identifier for the request used in audit logs.

Requires the Cerbos policy decision point server to be at least v0.33.

The type of plan.

metadata: PlanResourcesMetadata | undefined

Additional information about the query plan.

undefined if includeMetadata was false.

requestId: string

The identifier for tracing the request.

validationErrors: ValidationError[]

Any schema validation errors for the principal or resource attributes.