Policies‎‎‎‎‎

Overview

In QueryPie, you can view, create, edit, duplicate, and delete access policies for web applications managed by your organization. A Policy is a fundamental component that defines the rules for implementing and enforcing web app access permissions.

Viewing Policies

1. Go to Administrator > Web Apps > Web App Access Control > Policies.

2. Use the search bar in the top left of the table to search for policies by name.

3. Click the refresh button in the top right to update the list with the latest data.

4. The table provides the following information for each policy:

   • Name: Policy name

   • Description: Detailed policy description

   • Created At: Date and time the policy was first created

   • Updated At: Date and time the policy was last updated

   • Updated By: Administrator who last updated the policy

5. Click any row to view detailed information about a policy.

   1. Detail

      

      1. This is the default tab, where you can view the code defined for the policy.

      2. In the Detail tab, click the Go to Editor Mode button (located on the right) to switch to the Code Editor page for the policy.

   2. Roles
      

      

      1. This tab lists all roles that have the selected policy assigned.

      2. The table displays the following details for each role:

         • Name: Role name

         • Description: Role description

         • Assigned At: Date and time the policy was assigned to the role

         • Assigned By: Administrator who assigned the policy

      3. Click any row to view detailed information about the role in a drawer panel.

   3. Versions

      

      1. This tab lists all versions of the selected policy.

         • A new version is created whenever the policy code is edited and saved.

      2. The table shows the following information for each version:

         • Version: Version name or number

         • Justification: Reason for the policy update

         • Updated At: Date and time the version was created

         • Updated By: Administrator who made the update

      3. Click any row to view detailed information about the version in a drawer panel, including:

         • Title: Policy name

         • Version: Version number

         • Justification: Reason for the update

         • Updated At: Date and time the version was created

         • Updated By: Administrator who updated it

         • A snapshot of the policy code for that version is shown at the bottom.

Creating a Policy

1. Go to Administrator > Web Apps > Web App Access Control > Policies.

2. Click the + Create Policy button in the top right.

3. Enter the following details:

   1. Name: A clear, identifiable policy name (required)

   2. Description: Additional information about the policy

4. Click OK to create the policy.

5. Click the newly created policy at the top of the list.

6. Refer to the WAC Role & Policy Guide to configure the policy.

Editing a Policy

1. Go to Administrator > Web Apps > Web App Access Control > Policies.

2. Click the policy you want to edit to open its detail page.

3. Click the Edit button in the top right and update the following details as needed:

   • Name: Policy name (required)

   • Description: Policy description

4. Click OK to save your changes.

Duplicating a Policy

1. Go to Administrator > Web Apps > Web App Access Control > Policies.

2. Click the policy you want to duplicate to open its detail page.

3. Click the Duplicate button in the top right and update the following details for the duplicate policy:

   1. Name: New policy name (required)

   2. Description: Description of the duplicate policy

4. Click OK to create the duplicate.

5. The new duplicate policy appears at the top of the list — click it to view or edit.

Deleting a Policy

1. Go to Administrator > Web Apps > Web App Access Control > Policies.

2. You can delete a policy in either of these ways:

   1. From the list:

      • Check the box next to the policy you want to delete.

      • Click the Delete button that appears in the table header.

   2. From the details page:

      • Click the Delete button in the top right.

3. In the confirmation pop-up, click Delete to complete the deletion.

When a policy is deleted, it will be automatically removed from any associated web applications and roles.

Editing Policy Code

1. Go to Administrator > Web Apps > Web App Access Control > Policies.

2. Click the policy you want to edit to open its detail page.

3. In the Detail tab, click the Go to Editor Mode button in the top right.

4. In the Code Editor, you can:

   1. Edit the policy code directly in the left-hand YAML editor.

   2. Use the Edit Spec panel on the right for additional options:

      • Edit Spec – Allow: Add or edit allow rules.

        • Add Resources: Add resources to the allow list.

        • Set Conditions: Define specific conditions.

      • Edit Spec – Deny: Add or edit deny rules.

        • Add Resources: Add resources to the deny list.

   3. Use the Errors(0) / Tips(1) tab at the bottom to check for code errors and tips.

5. Click Save Changes to save your edits or Cancel to discard them.