{"action":"created","issue":{"url":"https://api.github.com/repos/ory/keto/issues/135","repository_url":"https://api.github.com/repos/ory/keto","labels_url":"https://api.github.com/repos/ory/keto/issues/135/labels{/name}","comments_url":"https://api.github.com/repos/ory/keto/issues/135/comments","events_url":"https://api.github.com/repos/ory/keto/issues/135/events","html_url":"https://github.com/ory/keto/issues/135","id":492157487,"node_id":"MDU6SXNzdWU0OTIxNTc0ODc=","number":135,"title":"glob not working on members of groups","user":{"login":"zd9KgA","id":55187895,"node_id":"MDQ6VXNlcjU1MTg3ODk1","avatar_url":"https://avatars2.githubusercontent.com/u/55187895?v=4","gravatar_id":"","url":"https://api.github.com/users/zd9KgA","html_url":"https://github.com/zd9KgA","followers_url":"https://api.github.com/users/zd9KgA/followers","following_url":"https://api.github.com/users/zd9KgA/following{/other_user}","gists_url":"https://api.github.com/users/zd9KgA/gists{/gist_id}","starred_url":"https://api.github.com/users/zd9KgA/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zd9KgA/subscriptions","organizations_url":"https://api.github.com/users/zd9KgA/orgs","repos_url":"https://api.github.com/users/zd9KgA/repos","events_url":"https://api.github.com/users/zd9KgA/events{/privacy}","received_events_url":"https://api.github.com/users/zd9KgA/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2019-09-11T10:41:27Z","updated_at":"2019-11-06T15:47:10Z","closed_at":null,"author_association":"NONE","body":"Wildcards in the members of groups are not interpreted as wildcards for flavor glob.\r\n\r\nApplies to recent versions of keto, e.g., to commit db94481.\r\n\r\nThe reason seems to be at the end of the file *engine/ladon/rego/glob/main.rego* in the function *match_subjects*. The intended implementation is preceded by the implementation for the flavor exact.\r\n\r\nAdd something like\r\n\r\ndecide_allow([group_policy], [{\"id\": \"groups:6\", \"members\": [\"group-*\"]}]) with input as {\"resource\": \"articles:6\", \"subject\": \"group-member\", \"action\": \"actions:6\"}\r\n\r\nto main_test.rego for a corresponding test."},"comment":{"url":"https://api.github.com/repos/ory/keto/issues/comments/550370142","html_url":"https://github.com/ory/keto/issues/135#issuecomment-550370142","issue_url":"https://api.github.com/repos/ory/keto/issues/135","id":550370142,"node_id":"MDEyOklzc3VlQ29tbWVudDU1MDM3MDE0Mg==","user":{"login":"zd9KgA","id":55187895,"node_id":"MDQ6VXNlcjU1MTg3ODk1","avatar_url":"https://avatars2.githubusercontent.com/u/55187895?v=4","gravatar_id":"","url":"https://api.github.com/users/zd9KgA","html_url":"https://github.com/zd9KgA","followers_url":"https://api.github.com/users/zd9KgA/followers","following_url":"https://api.github.com/users/zd9KgA/following{/other_user}","gists_url":"https://api.github.com/users/zd9KgA/gists{/gist_id}","starred_url":"https://api.github.com/users/zd9KgA/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zd9KgA/subscriptions","organizations_url":"https://api.github.com/users/zd9KgA/orgs","repos_url":"https://api.github.com/users/zd9KgA/repos","events_url":"https://api.github.com/users/zd9KgA/events{/privacy}","received_events_url":"https://api.github.com/users/zd9KgA/received_events","type":"User","site_admin":false},"created_at":"2019-11-06T15:47:10Z","updated_at":"2019-11-06T15:47:10Z","author_association":"NONE","body":"Now, with the ability to run tests, I realized that my original analysis of the problem is wrong - in fact, I realized my understanding of rego is not sufficient to propose a fix. \r\n\r\nIn summary, I can contribute only contribute the problem (i.e. test case which can be added to the set of tests in test_allow_group_policy), but not a fix."}}
{"actor":{"display_login":"zd9KgA"}}