UpdateAuthorizationPolicyInputType

Attributes of an authorization policy to change; omitted attributes keep their current value

type UpdateAuthorizationPolicyInputType {
  content: String
  flash_alert: String
  manually_managed: Boolean
  metadata: HashObject
  name: String
  physical_file_path: String
  redirect_to: String
}

Fields

content (String)

Liquid code evaluated on each request to a page using the policy; access is
granted only when it renders to true (case and surrounding whitespace are ignored)

flash_alert (String)

Liquid code rendered into the flash alert message shown when access is denied

manually_managed (Boolean)

When true, pos-cli deploy and sync never overwrite or delete it and pos-cli pull skips it

metadata (HashObject)

Arbitrary JSON data stored with the policy (the metadata section of the file); replaces the existing metadata

name (String)

Deprecated, the name is derived from physical_file_path. Name used to attach the policy to pages

physical_file_path (String)

New path of the file the policy is stored as, used by pos-cli pull and deploy.
Must be authorization_policies/<name>.liquid, optionally prefixed with
modules/<module_name>/public/ or modules/<module_name>/private/, for
example authorization_policies/is_admin.liquid

redirect_to (String)

Liquid code rendering to the URL the user is redirected to when access is
denied. A return_to parameter with the requested path is appended unless
disabled in the instance configuration. When not set, the request is answered
with an error status instead (403 by default)