intuit/identity-authz-apl

Decision Arbitration

baladutt opened this issue · 0 comments

Issue Template

Context

Multiple rules giving conflicting decisions, there should be a way to find the right outcome. Deny takes precedence? Salience takes precedence? Or a configuration.

5 modes,

fastest one rule execution
fastest one decision
fire all rules and decide on decision
Any deny or just 1 permit (with 0 deny)
Salience based decision making
Client's get to choose mode and then write policies according to that.

Expected Behavior

Please describe the behavior you are expecting

Current Behavior

What is the current behavior?

Failure Information (for bugs)

Please help provide information about the failure if this is a bug. If it is not a bug, please remove the rest of this template.

Steps to Reproduce

Please provide detailed steps for reproducing the issue.

  1. step 1
  2. step 2
  3. you get it...

Failure Logs

Please include any relevant log snippets or files here.