niscDocsGitHub →
Charter · Verifier rules

re-allow (warning)

Warning. Reported when a role allows an id that a role it extends denies. This is valid, because a deny applies only to the role it is written on; it is reported so that the grant gets reviewed.

Charter
{
  staff: { allow: ['*'], deny: ['takings'] },
  manager: { extends: ['staff'], allow: ['takings'] },
}
Reported issues
[
  {
    level: 'warning',
    rule: 're-allow',
    detail: 'role "manager" re-allows "takings" (actions) which an ancestor denied',
  },
]
Output matches the expected value

Runs in this page on the installed package. The input and the expected output are defined by the example.