Generate dictionary with a string as a key and an array of strings as value

Question

I have the following Rego policy:

package authz

import future.keywords.in

# The permissions the user has for each property
permissions[property_id][permission] {
    some property_id, property_roles in input.subject.property_roles
    some permission, roles in data.common.permissions_roles
    property_roles == roles
}

The following input:

{
    "subject": {
        "property_roles": {
            "K1": [
                "R1"
            ]
        }
    }
}

and the following data:

{
    "common": {
        "permissions_roles": {
            "property.create": [
                "R0"
            ],
            "service.read": [
                "R1"
            ],
            "service.modify": [
                "R1"
            ]
        }
    }
}

The playground can be found here.

The goal is to build a dictionary with a string as a key and an array of strings as value, something like:

{
    "permissions": {
        "K1": ["service.modify", "service.read"]
    }
}

So far, I can get this:

{
    "permissions": {
        "K1": {
            "service.modify": true,
            "service.read": true
        }
    }
}

I also tried to use permissions[property_id] = [permission] which is what I would have expected to do, but then I get the following error:

policy.rego:6: eval_conflict_error: object keys must be unique

I hope somebody can suggest a better way to achieve the goal!

SignalRichard · Accepted Answer · 2024-10-23 18:04:55Z

0

You can achieve the desired output by importing the future.keywords.contains and then changing the rule header to use contains:

package authz

import future.keywords.contains
import future.keywords.in

# The permissions the user has for each property
permissions[property_id] contains permission {
    some property_id, property_roles in input.subject.property_roles
    some permission, roles in data.common.permissions_roles
    property_roles == roles
}

Some reference reading can be found here:

The error you encountered eval_conflict_error: object keys must be unique is documented here
Referenced documentation for solution is here (see Leaf entries can be partial sets in module example)
Rego playground ref

answered Oct 23, 2024 at 18:04

SignalRichard

1,7072 gold badges18 silver badges34 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Generate dictionary with a string as a key and an array of strings as value

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related