# yaml-language-server: $schema=https://api.cerbos.dev/latest/cerbos/policy/v1/Policy.schema.json
---
apiVersion: api.cerbos.dev/v1
description: Common variables
exportVariables:
  name: common_variables
  definitions:
    resource_tenant: R.attr.tenant.tenant_uuid
    resource_tenant_hierarchy: R.attr.tenant.tenant_hierarchy
    principal_is_not_impersonated: has(P.attr.impersonated_by_identity_uuid) == false
    principal_is_impersonated: V.principal_is_not_impersonated == false
    principal_is_machine: P.attr.type == "machine"