Are there any condition method "toString"?

[NormandoHall]

Hi all.

I am using conditions to create the owner derived role:

    - name: owner
      parentRoles: ["auditor", "admin", "superadmin"]
      condition:
        match:
          all:
            of:
              - expr: request.resource.attr.createdBy == request.principal.attr._id
              - expr: request.principal.attr.locked == false

But createdBy and _id are MongoDB ObjectId. Are there any method to compare them or cast to string?

Thanks

[dbuduev]

Conditions are written using the Common Expression Language (CEL). You can cast a value to a string using the string(x) function.

But, when a policy is evaluated, these fields no longer have the type MongoDB ObjectId. The payload is serialised when the application calls the Cerbos endpoint. The serialisation might be incorrect.

For debugging or auditing purposes, you can enable request and response payload logging for each request. See Payload logging.

[NormandoHall]

Thanks for your answer.

string(ObjectId) not works, so I will convert them to string in my code before send to Cerbos.

Regards