Overview

In the previous chapter, we worked under the simplifying but unrealistic assumption that one user (you!) would be allowed to change policy on the fly, and unilaterally. In production, policy changes should follow at least a four-eye principle, requiring two users.

In this chapter, we will create two users, and see how they collaborate to create policy rules.