Skip to content

Releases: hexa-org/policy-mapper

v0.8.0

27 Nov 17:37
Compare
Choose a tag to compare

This release provides significant enhancements as follows:

  • Simplified IDQL structure
  • New Entity Value format to allow for different ways to express entities and sub-attributes
  • New Policy Information Model support and policy validation capability
  • Enhanced condition expressions that leverage PIM models to better detect comparable types (e.g. strings vs. attributes)

Issues
#57 - Implement Policy Information Model (aka Schema Support), including example validation for AuthZen scenario
#59 - Simplify IDQL JSON Policy format (flatten structure)
#65 - Adopt support for AVP Json Schema format as PIM model
#69 - Implement validation of IDQL policy based on PIM models, load model and validate added to Hexa CLI
#71 - Condition expressions enhanced to support type comparisons, conditions can now parse sets ([ “a”, “b”]) and detect string vs. attributes using schema

Fixes
#67, #70 - Allow for empty Actions, Subjects, and Object values in Rego (used by Policy-OPA)

Release v0.7.0

15 Sep 19:36
Compare
Choose a tag to compare

This release completes a major re-factoring of the Hexa Projects whereby the Policy-Mapper project now comprises the majority code base for policy transformation and mapping as well as provisioning. For more information see the Developer Guide.

In the most recent check-ins, IDQL JSON structure was greatly simplified consolidating the last few years of evolution into a consistent approach for handling Subjects, Actions, and Objects in policies. The current policy version format is referred to as "0.7" and where possible, the hexapolicy parsers do perform auto-upgrade from 0.6 and earlier forms where possible.

v0.6.0-bata.1

30 Nov 23:53
Compare
Choose a tag to compare

Initial testing release with extensions for AVP

v0.5.0 Prototype Release

02 Sep 23:09
Compare
Choose a tag to compare

Initial release of policy mapping package and command line utility demonstrating syntactical mapping of policy between

  • Hexa IDQL,
  • Google Bind, and
  • AWS Cedar

Includes support for mapping of IDQL conditions to Google Condition Expression Language (CEL).

This is a prototype release and is not intended for production.