Property
This section describes features that are coming in 4.0
The property
condition allows you to constrain a policy statement so that it applies to entities where a specific property matches a value. This condition supports regular expressions, allowing you to focus in on a single ID or wildcard expressions within an ID.
Configuration
{
"type": "property",
"config": {
"property": "{property name}",
"value": "{property value or regex}"
}
}
Samples
This policy document grants the Consumer role to any content where a lifecycle state
is live
:
{
"title": "My Sample Policy",
"statements": [{
"action": "grant",
"roles": ["consumer"],
"conditions": [{
"type": "property",
"config": {
"property": "state",
"value": "live"
}
}]
}]
}