Matching of access claims

Noumena Protocol Language
1

If I have two access claims like this:

            Map.of(
                "permissions", Set.of("read", "write", "admin"),
                "roles", Set.of("user", "admin")
            )

Then for the access to be allowed I must have one of each in my actual claims

Map.of(
            "permissions", Set.of("read"),
            "roles", Set.of("other")

Should not work, correct?

2

Hi Sandy,

You are correct, the suggested user claims should not allow the user to access the protocol with mentioned party.

The party models behaves the following way:

  1. All claim keys in a party (both in the entity and access) need to be present in the user’s claims.
  2. For each claim key in the access section, at least one of the values need to be present in the user claims.
  3. For each claim key in the entity section, all the values need to be present in the user claims.