Home
Policies
Access Control List
ACL policies can be built many ways depending on your requirements. This example shows how to perform an authorization check on a hard-coded list of users.
This policy could be extended to fetch data from external sources or even use an authorization service such as OpenFGA.
Configuration#
{
"name": "my-acl-policy-inbound-policy",
"policyType": "acl-policy-inbound",
"handler": {
"export": "default",
"module": "$import(./modules/YOUR_MODULE)",
"options": {
"users": [
"google|12345",
"google|23456"
]
}
}
}
Options#
name
the name of your policy instance. This is used as a reference in your routes.policyType
the identifier of the policy. This is used by the Zuplo UI. Value should beacl-policy-inbound
.handler/export
The name of the exported type. Value should bedefault
.handler/module
the module containing the policy. Value should be$import(./modules/YOUR_MODULE)
.handler/options
The options for this policy:users
The list of users authorized to access the resource