← All Recipes
Bazantic // Recipe

AuthZEN Access Control Ruling Table

By Tim Swanson

authzen-access-control-ruling-table

Converts plain-English access-control questions into a batch AuthZEN evaluation, resolving canonical subject and resource IDs, translating business predicates into exact action/attribute structures, and returning a markdown ruling table with PERMIT/DENY verdicts, governing policy rules, and execution hashes.

Recipe inputs
Complete fields before a run.
Access Control Questions
Access Control Questions *Array of plain-English questions like 'Can Alice approve payment TX-042?' or 'Can admin Bob soft-delete archived document DOC-7?'. Each question will be parsed to extract subject, action, and resource.
Optional business context or policy rules to guide predicate translation (e.g., 'soft delete means action {"name":"delete","properties":{"soft":true}}; archived means resource attribute {"archived":true}').
URL of the AuthZEN POST /access/v1/evaluations batch endpoint. Format: https://gateway.example.com/access/v1/evaluations
URL of the AINumbers gateway endpoint to resolve subject canonical IDs (e.g., 'alice' from 'Alice'). Format: https://gateway.example.com/subjects/search
URL of the AINumbers gateway endpoint to resolve resource canonical IDs and attributes (e.g., 'TX-042' from 'payment TX-042'). Format: https://gateway.example.com/resources/search
Output example
Representative published output.
"```json\n{\n  \"markdown_table\": \"| Question | Decision | Governing Policy Rule | Execution Hash |\\n| --- | --- | --- | --- |\\n| Can Alice approve payment TX-042? | DENY | \\\"default: deny\\\" | b2587c08ded9398ef1853e166e25450bf2b96ae38977cb7ca2da6d757e0c2006 |\\n| Can admin Bob soft-delete archived document DOC-7? | PERMIT | \\\"delete: permit iff action.properties.soft == true\\\" | d3b64b76de2b8591eed395adde6f1afac37240a6a3eb701d196860d11e12d7ee |\"\n}\n```"