[WOOKIE-322] Policies API only validates the origin, not the scope or directive

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.9.2
• Fix Version/s: 0.10.0
• Assignee: Scott Wilson
• Reporter: Scott Wilson
• Created: 01/Mar/12 14:10
• Updated: 14/May/12 17:32
• Resolved: 14/May/12 17:32

Description

The policies API doesn't do any validation of scope or directives for access policies, e.g.:

• * WHATEVER

... is accepted as a valid policy, as is

FAIL * MAYBE