# yaml-language-server: $schema=https://api.cerbos.dev/latest/cerbos/policy/v1/Policy.schema.json
---
apiVersion: api.cerbos.dev/v1
resourcePolicy:
  version: default
  resource: demo_check_feature_control
  schemas:
    principalSchema:
      ref: cerbos:///principal.json
    resourceSchema:
      ref: cerbos:///tenant_owned_resource.json
  importDerivedRoles:
    - workstation_roles
  variables:
    import:
    - account_feature_controls
  rules:
  - name: hype
    actions: ["hype"]
    derivedRoles: [
      "workstation_catalog"
    ]
    condition:
      match:
        expr: V.has_bulk_uploader_tool_2025
    effect: EFFECT_ALLOW