Skip to content

Commit a11064a

Browse files
update other PPL page
1 parent df05f84 commit a11064a

File tree

2 files changed

+17
-4
lines changed

2 files changed

+17
-4
lines changed

content/docs/get-started/fundamentals/core/build-policies.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -115,7 +115,7 @@ There are four logical operators:
115115

116116
In PPL, a criterion defines a specific condition to evaluate, such as a user’s email or device type.
117117

118-
- Each criterion is an object where the key is the criterion name (optionally with a sub-path), and the value specifies what to match or compare.
118+
- Each criterion is an object where the key is the criterion name (optionally with a sub-path, delimited by `/`), and the value specifies what to match or compare.
119119
- The exact format of the value depends on the type of criterion being used.
120120

121121
#### Matchers

content/docs/internals/ppl.mdx

Lines changed: 16 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,11 +53,21 @@ It will deny access to users with a `[email protected]` **or** `[email protected]
5353

5454
## Rules
5555

56-
A PPL document is either an object or an array of objects. The object represents a rule where the action is the key and the value is an object containing the logical operators.
56+
A rule is the basic building block of a PPL policy. Each rule says what action to take (allow or deny) and under what conditions.
57+
58+
- The action (allow or deny) is the outcome if the conditions are met.
59+
- The conditions are expressed using logical operators, criteria, and matchers.
60+
61+
A PPL document can contain:
62+
63+
- A single rule, or
64+
- An array of rules (evaluated together).
5765

5866
## Actions
5967

60-
Only two actions are supported: `allow` and `deny`. `deny` takes precedence over `allow`. More precisely: a user will have access to a route if **at least one** `allow` rule matches and **no** `deny` rules match.
68+
Actions are one of the two values : `allow` or `deny`. `deny` always takes precedence over `allow`.
69+
70+
Users will have access to a route if **at least one** `allow` rule matches and **no** `deny` rules match.
6171

6272
## Logical Operators
6373

@@ -123,7 +133,10 @@ Although these policies are equally effective, we recommend using just one opera
123133

124134
## Criteria
125135

126-
Criteria in PPL are represented as an object where the key is the name and optional sub-path of the criterion, and the value changes depending on which criterion is used. A sub-path is indicated with a `/` in the name:
136+
In PPL, a criterion defines a specific condition to evaluate, such as a user’s email or device type.
137+
138+
- Each criterion is an object where the key is the criterion name (optionally with a sub-path, delimited by `/`), and the value specifies what to match or compare.
139+
- The exact format of the value depends on the type of criterion being used.
127140

128141
```yaml
129142
allow:

0 commit comments

Comments
 (0)