Support for policy templates

[jgmills98]

Hi,

I am currently implementing a poc with cedar using this library. Is there any support for passing in template-linked policies?

Thank you for your time and work on this project!

[skuenzli]

Hi Jordan - the library doesn't support template-linked policies right now.

But if you want to collaborate on adding that support, we'd be open to it.

(you're welcome!)

[jgmills98]

Thanks for getting back to me!

I am definitely interested in trying to expand the supported features. These are the features that I think would be useful for my use case, in no particular order:

1. template-linked policies, as mentioned here
2. optionally allow the @id annotation to set the policy id
   • It looks like it's getting parsed by cedar, but gets ignored. I copied cedar-policy-cli's implementation locally and was able to get it to work after a few modifications.
   • could also allow the user to define what the id annotation key should be in case it's not @id
3. Support for partial evaluation? #28
4. cedar-py swallow errors if invalid schema is provided #27
5. adding similar functionality to cedar-policy-cli's validate command. Either as a separate function or apart of the is_authorized/batch flow and return the error in the AuthzResult
6. Allow policies, entities, and schema to be parsed and re-used over multiple authorization calls (non-batch). My current use case is authorizing individual requests, so every request requires re-parsing. I saw this mentioned in the slack channel and agree it could be useful, though right now the time it takes to parse and authorize is pretty quick.

I want to try and tackle some of these myself when I have the time but need to brush up on rust and pyo3 first.