Cryptic Interactive Experiences
See why access is granted.
Configure a fictional organisation and inspect how role permissions and contextual attributes combine into an explicit access decision.
Operational local policy evaluator with synthetic subjects
Least privilege / explicit decisions
- Policy
- ABAC
- Request
- read / employee
- Decision
- Not evaluated
Make the policy visible.
Select a fictional subject, resource and context, then evaluate the request. A denial identifies the exact rules that failed.
- Subject
- employee · Finance
- Requested operation
- read · Finance invoices
- Authentication
- Present
- Evaluation model
- ABAC· deny unless every applicable condition passes
This summary shows the proposed request, not an access grant. Evaluate it to inspect the rule-by-rule decision, or open the graph to inspect each boundary.