generated from coulomb/repo-seed
46 lines
1.0 KiB
YAML
46 lines
1.0 KiB
YAML
id: fixture:markitect-internal-read-allow
|
|
request:
|
|
id: check:tenant-alpha-internal-note
|
|
subject:
|
|
id: user:alice
|
|
type: Human
|
|
tenant: tenant:alpha
|
|
action: read
|
|
resource:
|
|
id: document:internal-note
|
|
type: document
|
|
system: markitect-tool
|
|
tenant: tenant:alpha
|
|
caring_context:
|
|
id: descriptor:tenant-alpha-document-reader
|
|
profile: caring-0.4.0-rc2
|
|
subject_type: Human
|
|
organization_relation: Customer
|
|
canonical_role: Doer
|
|
scope:
|
|
level: Resource
|
|
id: document:internal-note
|
|
tenant: tenant:alpha
|
|
resource: document:internal-note
|
|
planes:
|
|
- Data
|
|
capabilities:
|
|
- View
|
|
exposure_modes:
|
|
- Masked
|
|
- Plaintext
|
|
conditions:
|
|
- PurposeBound
|
|
- Logged
|
|
restrictions:
|
|
- ExportBlocked
|
|
expect:
|
|
effect: allow
|
|
reason: reader_relation
|
|
conformance_findings:
|
|
- code: CARING-EXPORT-SEPARATION
|
|
severity: info
|
|
message: View is allowed, but Exportable exposure remains separately blocked.
|
|
metadata:
|
|
source: examples/caring
|