Skip to content

IDQL to cedar policy - validation error #79

@pnawalramka

Description

@pnawalramka

I tried converting the todo scenario policy to cedar using hexacli. The resulting cedar policy fails to validate on cedar playground. Part of the failure is due to missing namespace in the input idql and generated cedar. However, once I edit the cedar policy to prefix the namespace as flagged, the validation still fails on the condition rules.

Note: policy-mapper is on slightly older version of cedar-go v1.2.1 while the cedar-playground might be more upto date.

Cedar policy generated using:

2025/09/20 14:30:14 Hexa Command Line Utility (version: 0.8.4)
hexa> map to cedar todo-idql.json

Also noticed that this test logs policy validation errors as well (test is passing due to missing assertions).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions