Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updates ppl example #1387

Merged
merged 1 commit into from
May 7, 2024
Merged

Updates ppl example #1387

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions content/docs/capabilities/ppl.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,17 +27,17 @@ allow:
and:
- domain:
is: example.com
- user:
is: [email protected]
deny:
or:
- user:
- email:
is: [email protected]
- user:
- email:
is: [email protected]
```

This policy will allow a user with an email address at `example.com` who **is also** `user`. It will deny `user2` **or** `user3`, regardless of their domain and group membership.
This policy grants access only if the domain portion of a user's email address matches the specified value, `example.com`.

It will deny access to users with a `[email protected]` **or** `[email protected]` email address.

## Rules

Expand Down Expand Up @@ -149,7 +149,7 @@ Entries marked with `*` denote criteria that are only available in the [Enterpri
| \* `record` | variable | Allows policies to be extended using data from [external data sources](/docs/integrations) |
| `reject` | Anything. Typically `true`. | Always returns false. The opposite of `accept`. |
| \* `time_of_day` | [Time of Day Matcher] | Returns true if the time of the request (for the current day) matches the constraints. |
| `user` | [String Matcher] | Returns true if the logged-in user's id matches the given value. |
| `user` | [String Matcher] | Returns `true` if the logged-in user's ID matches the supplied value. (The actual value of the user ID claim depends on how the identity provider sets this value.) |

Entries marked with `*` denote criteria that are only available in the [Enterprise Console](/docs/deploy/enterprise) PPL builder. All other entries are available in both Pomerium Core and Pomerium Enterprise.

Expand Down
Loading