IDQL Policy and Query Tools

Build, format, explain, validate, test, and compare pinned Hexa IDQL policy documents locally.

IDQL 0.7 is the pinned compatibility profile. Validation and local evaluation do not prove provider acceptance or make an authorization decision.

IDQL policyPinned format 0.7

{
  "meta": {
    "version": "0.7",
    "policyId": "policy-100",
    "description": "Fictional report access"
  },
  "subjects": [
    "user:employee"
  ],
  "actions": [
    "read"
  ],
  "object": "reports:quarterly",
  "condition": {
    "action": "allow",
    "query": "department eq \"Engineering\" and active eq true"
  },
  "scope": {
    "filter": "status eq \"published\""
  }
}

Validation resultLocal policy review

{
  "meta": {
    "version": "0.7",
    "policyId": "policy-100",
    "description": "Fictional report access"
  },
  "subjects": [
    "user:employee"
  ],
  "actions": [
    "read"
  ],
  "object": "reports:quarterly",
  "condition": {
    "action": "allow",
    "query": "department eq \"Engineering\" and active eq true"
  },
  "scope": {
    "filter": "status eq \"published\""
  }
}

Condition queryBoth conditions must match: Attribute department eq Engineering. and Attribute active eq true.

department eq "Engineering"
and active eq true

Modevalidate

StatusReviewable

Policy issues0