Fine Grained Authorization Blueprint

Resource-based and policy-based authorization

   
Feature fine-grained-authorization
Category Access Control
Version 1.0.0
Tags authorization, rbac
YAML Source View on GitHub
JSON API fine-grained-authorization.json

Fields

Name Type Required Label Description
resource_id text Yes Resource ID Validations: required
scope_name text Yes Scope Validations: required

Rules

  • core: Authorization policy evaluation

Outcomes

Access_granted (Priority: 5)

Given:

  • resource_id exists null

Then:

  • emit_event event: authz.granted

Result: Access granted

Errors

Code Status Message Retry
ACCESS_DENIED 403 Access denied No

Events

Event Description Payload
authz.granted Authorization granted resource_id
Extensions (framework-specific hints) ```yaml source: repo: https://github.com/keycloak/keycloak project: Keycloak tech_stack: Java ```