kraut security proposal: sequential rules approach

security.yml

- Operation: monitor.*
  Property:
    security.user.role:
      - authenticated


- Operation: upcloud.destroy
  Property:
    security.user.name:
      - jamesnesbitt
      - jannekoponen
    upcloud.server.uuid:
      - AAAAAA-AAAAAAA-AAAAAAA

- Operation: upcloud.*
  Property:
    security.user.role:
    - admin
      
# Demo to show more options      
- Id: production.wkfi.demo_operation
  Message: User {security.user.name} is not allowed to demo {demo.property.one}
  Operation: demo.operation
  Authorize: Deny # Default is Allow
  Aggregate: OR  # Default is AND
  Property:
    demo.property.one:
      - value1
      - value2
    demo.property.two:
      - value3
      - value4