allow resourceId to be undefined

This commit is contained in:
x032205
2025-12-06 17:59:01 -05:00
parent 8b22e7c417
commit e82d810ac7
2 changed files with 2 additions and 2 deletions

View File

@@ -29,7 +29,7 @@ export const pamAccessPolicyFactory: TApprovalResourceFactory<
for (const policy of policies) {
const p = policy as TPamAccessPolicy;
for (const c of p.conditions.conditions) {
if (!c.resourceIds.some((r) => r === inputs.resourceId)) {
if (c.resourceIds && !c.resourceIds.some((r) => r === inputs.resourceId)) {
// eslint-disable-next-line no-continue
continue;
}

View File

@@ -19,7 +19,7 @@ export const PamAccessPolicyInputsSchema = z.object({
// Conditions
export const PamAccessPolicyConditionsSchema = z
.object({
resourceIds: z.string().uuid().array(),
resourceIds: z.string().uuid().array().optional(),
accountPaths: z.string().array() // TODO(andrey): Add path & wildcard validation
})
.array();