{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://tylereno.me/oidf/schemas/config/authorization_policy.json",
  "title": "AuthorizationPolicyBody",
  "description": "ConfigurationDocument.body when domain=AuthorizationPolicy",
  "x-keel-schema-version": "1.0.0",
  "type": "object",
  "additionalProperties": false,
  "required": ["grants"],
  "properties": {
    "grants": {
      "type": "array",
      "items": {
        "type": "object",
        "additionalProperties": false,
        "required": ["principal_id", "actions"],
        "properties": {
          "principal_id": { "$ref": "../common/identifier.json" },
          "role": { "type": "string" },
          "actions": {
            "type": "array",
            "minItems": 1,
            "items": {
              "type": "string",
              "enum": [
                "evidence.submit",
                "evidence.validate",
                "transition.request",
                "config.revise",
                "sync.import",
                "plugin.admin"
              ]
            },
            "uniqueItems": true
          },
          "resource_kind": {
            "type": "string",
            "enum": ["Deployment", "Asset", "Configuration", "Node", "Plugin", "*"]
          }
        }
      }
    }
  }
}