IndyKite AuthZEN - batch evaluations

Batch evaluation makes many KBAC decisions in one request. You supply top-level subject / action / resource / context as defaults and an evaluations[] array where each entry overrides only the parts it specifies; the response carries one boolean decision per entry, in order.

This skill covers building and sending the batch request and reading the results. It does not author policies - the 2.0-kbac policies every entry is evaluated against are authored with indykite-authzen-kbac.

When to use

Activate this skill when the user wants to:

• check one subject against many resources (e.g. "of these 20 servers, which can grace PROVISION?");
• check one action across many subjects (e.g. "which of these people can deploy gpu-node-7?");
• evaluate a heterogeneous mix of (subject, action, resource) triples in a single call.

Do not activate this skill to make a single yes/no decision (indykite-authzen-evaluation), to enumerate all instances for one probe (the search skills indykite-authzen-search-action / -search-resource / -search-subject), or to author a policy or read/write graph data (batch evaluation only renders decisions).

Prerequisites