We want to be able to craft policies by an expression instead of creating loaders or tons of reference groups based on cartesian products of basis/ref groups.
Individual groups can be configured to automatically have their membership managed with individual subject or other basis groups.
Two Grouper tables will be constructed
Table name | Description |
---|---|
grouper_abac_group_attributes | Rows for groups and attribute names and values |
grouper_abac_subject_attributes | Row for subjects and attribute names and values |
These tables are managed by grouper based on configuration