Setting objects' attributes in vakt about vakt HOT 3 CLOSED

    Policy(
        uid=12345,
        effect=ALLOW_ACCESS,
        subjects=['username=<.*>;position=<owner|collaborator>'], # `;` and `=` here are arbitrary delimiters
        resources=('some-resource-definition'),
        actions=['<read|update>'],
        rules={
            'dataset-ids': InList(['a', 'b', 'c', 'd', 'e']),
        },
    )

Inquiry(subject='username=max;position=collaborator', action='read', context={'dataset-ids':'d'})

    Policy(
        uid=12345,
        effect=ALLOW_ACCESS,
        subjects=['username=<.*>;position=<owner|collaborator>'], # `;` and `=` here are arbitrary delimiters
        resources=['dataset:1', 'dataset:2'], # imagine 2 possible datasets each with some information like IDs
        actions=['dataset:id:<add|remove>', 'delete'] # add/remove id from dataset; delete - action that deletes the whole dataset
    )

Inquiry(subject='username=max;position=collaborator', action='dataset:id:add', resource='dataset:1') # allowed

Inquiry(subject='username=jerry;position=contributor', action='dataset:id:add', resource='dataset:1') # rejected

Inquiry(subject='username=kim;position=owner', action='dataset:id:remove', resource='dataset:3') # rejected