While testing Dynamic Policy in R3 M19 Azure environment, when the search policy is changed to not allow access, it does not work as expected.
When testing Dynamic Policy in R3 M19 Azure environment, I am able to test the Dynamic Policy for Storage service by loading datazauthz.rego file with all access and no access files and see the expected behavior.
But when I try to do the same with Search service and loading search.rego file with all access and no access, I do not see the expected behavior. Even after loading the search.rego file with
search.rego
package osdu.partition["opendes"].searchallow := false
I am able to retrieve the records. In the attached file look under search requests 5a!!!, 5b and 5c. Azure_Dynamic_Policy_E_O_Test.mdDynamic_Policy_E_O_Test.postman_collection.json
@Srinivasan_Narayanan @sakethsomaraju @chad @davidglass @debasisc @dadong.zhou