Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion docs/.vitepress/config.js
Original file line number Diff line number Diff line change
Expand Up @@ -31,8 +31,9 @@ export default defineConfig(withMermaid({
text: 'Authorization',
items: [
{ text: 'Getting Started', link: '/Authorization/GettingStarted' },
{ text: 'Startup Check', link: '/Authorization/StartupCheck' },
{ text: 'Authorization Policies', link: '/Authorization/AuthorizationPolicies' },
{ text: 'Authorization Checks', link: '/Authorization/AuthorizationChecks' },
{ text: 'Startup Check', link: '/Authorization/StartupCheck' },
{ text: 'Testing', link: '/Authorization/Testing' },
{ text: 'Technical Communication', link: '/Authorization/TechnicalCommunication' },
{ text: 'Deploying DCL', link: '/Authorization/DeployDCL' },
Expand Down
29 changes: 29 additions & 0 deletions docs/Authorization/AuthorizationPolicies.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
# Authorization Policies

Authorization policies grant the right to perform actions on protected resources in an application. They can be assigned to users to control access to various parts of the application.

Developers can define a set of base policies that can be assigned directly or used as building blocks to create additional policies during runtime by the application administrators.

## DCL

Authorization policies are defined in a domain-specific language called Data Control Language (**DCL**) that supports conditions that can be used to grant fine-grained access to resources.

### Example
Here is an example of authorization policies defined in DCL:

```dcl
SCHEMA {
country: String;
}

POLICY ReadSalesOrders {
GRANT read ON SalesOrders WHERE country IS NOT RESTRICTED;
}

POLICY SalesOrderDE {
USE ReadSalesOrders RESTRICT country = 'DE';
}
```

### Specification
The complete specification for DCL can be found in the [SAP Help Portal](https://help.sap.com/docs/cloud-identity-services/cloud-identity-services/data-control-language-dcl).