# yaml-language-server: $schema=https://api.cerbos.dev/latest/cerbos/policy/v1/Policy.schema.json
---
apiVersion: api.cerbos.dev/v1
derivedRoles:
  name: resource_owner
  definitions:
  - name: identity_owned_resource
    parentRoles:
    - user
    condition:
      match:
        expr: P.id == R.attr.identity_uuid