allow resourceId to be undefined

This commit is contained in:
x032205
2025-12-06 17:59:01 -05:00
parent 8b22e7c417
commit e82d810ac7
2 changed files with 2 additions and 2 deletions
@@ -29,7 +29,7 @@ export const pamAccessPolicyFactory: TApprovalResourceFactory<
for (const policy of policies) { for (const policy of policies) {
const p = policy as TPamAccessPolicy; const p = policy as TPamAccessPolicy;
for (const c of p.conditions.conditions) { for (const c of p.conditions.conditions) {
if (!c.resourceIds.some((r) => r === inputs.resourceId)) { if (c.resourceIds && !c.resourceIds.some((r) => r === inputs.resourceId)) {
// eslint-disable-next-line no-continue // eslint-disable-next-line no-continue
continue; continue;
} }
@@ -19,7 +19,7 @@ export const PamAccessPolicyInputsSchema = z.object({
// Conditions // Conditions
export const PamAccessPolicyConditionsSchema = z export const PamAccessPolicyConditionsSchema = z
.object({ .object({
resourceIds: z.string().uuid().array(), resourceIds: z.string().uuid().array().optional(),
accountPaths: z.string().array() // TODO(andrey): Add path & wildcard validation accountPaths: z.string().array() // TODO(andrey): Add path & wildcard validation
}) })
.array(); .array();