Checking that authz entitlements and permissions do exist

[mrded]

x-cerberus extension allows setting required entitlements and permissions checks. We need to make sure that those entitlements and permissions do exist.

Example:

x-cerberus:
  authorization:
    skip: false
    context:
      resourceIdParam: 'orgId'
      resourceType: 'org'
    entitlements:
      - entitlement0
      - entitlement1
    permissions:
      - read
      - test

Provided entitlements and permissions must be defined here: https://snyk.roadie.so/catalog/default/api/authz

[cmars]

It does depend on whether the API is permissioned or public.

[cmars]

Though, it's probably safe to say, if a resource is scoped to a group or org, it is permissioned.