The importance of testable authorization

Authorization policies are critical to the security and functionality of applications. Errors can lead to unauthorized access or hinder legitimate users. Testable authorization ensures that policies work as intended, providing a safety net against potential oversights and vulnerabilities.

Real-time feedback, continuous testing, and collaborative development

• Instant feedback loop: As you draft or modify policies, get immediate feedback, ensuring that errors are caught and rectified on the spot.
• Continuous testing with Cerbos Hub: Benefit from Cerbos Hub's automated testing capabilities, ensuring that your policies are always in their best shape.
• Collaborative IDE: Cerbos Hub's collaborative online IDE allows teams to develop, iterate, and test policies together, fostering a unified approach to authorization.
• GitOps workflow integration: Seamlessly integrate your authorization policy development with your git-based workflow, ensuring consistency and reliability.
• Troubleshooting made easy: With real-time feedback and testing, troubleshooting becomes a breeze, even during the development phase.
• Policy Playground: A dedicated environment to experiment, test, and understand the impact of policy changes, ensuring that you're always confident in your deployments.

Sample test suite for a Cerbos policy

        
      
      
expected:
  - resource: document#1
    principal: user#1
    actions:
      create: EFFECT_ALLOW
      read: EFFECT_ALLOW
      update: EFFECT_ALLOW
      delete: EFFECT_DENY
  - resource: document#1
    principal: admin#2
    actions:
      create: EFFECT_ALLOW
      read: EFFECT_ALLOW
      update: EFFECT_ALLOW
      delete: EFFECT_ALLOW

Create detailed test suites for each of your types of users and resources and define the expected decision for each action. These tests can run on every change to policy to ensure expected results.