Releases: hexa-org/policy-mapper
v0.8.0
This release provides significant enhancements as follows:
- Simplified IDQL structure
- New Entity Value format to allow for different ways to express entities and sub-attributes
- New Policy Information Model support and policy validation capability
- Enhanced condition expressions that leverage PIM models to better detect comparable types (e.g. strings vs. attributes)
Issues
#57 - Implement Policy Information Model (aka Schema Support), including example validation for AuthZen scenario
#59 - Simplify IDQL JSON Policy format (flatten structure)
#65 - Adopt support for AVP Json Schema format as PIM model
#69 - Implement validation of IDQL policy based on PIM models, load model and validate added to Hexa CLI
#71 - Condition expressions enhanced to support type comparisons, conditions can now parse sets ([ “a”, “b”]) and detect string vs. attributes using schema
Fixes
#67, #70 - Allow for empty Actions, Subjects, and Object values in Rego (used by Policy-OPA)
Release v0.7.0
This release completes a major re-factoring of the Hexa Projects whereby the Policy-Mapper project now comprises the majority code base for policy transformation and mapping as well as provisioning. For more information see the Developer Guide.
In the most recent check-ins, IDQL JSON structure was greatly simplified consolidating the last few years of evolution into a consistent approach for handling Subjects, Actions, and Objects in policies. The current policy version format is referred to as "0.7" and where possible, the hexapolicy parsers do perform auto-upgrade from 0.6 and earlier forms where possible.
v0.6.0-bata.1
Initial testing release with extensions for AVP
v0.5.0 Prototype Release
Initial release of policy mapping package and command line utility demonstrating syntactical mapping of policy between
- Hexa IDQL,
- Google Bind, and
- AWS Cedar
Includes support for mapping of IDQL conditions to Google Condition Expression Language (CEL).
This is a prototype release and is not intended for production.