<html xmlns="http://www.w3.org/1999/xhtml"><head> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no"> </head> <body dir="auto"><img id="33E9E7E95914C65767B3BE393381C98E" alt="" width="0px" src="https://receipts.canarymail.io/track/AE980BFE3A76DE71B7ADC1325DB56676_33E9E7E95914C65767B3BE393381C98E.png" height="0px"><div id="CanaryBody"> <div>hmmm</div><div><br></div><div>surely customer is part of the resource? and a create can simply use a resource ID of 0 or -1. or null</div><div><br></div><div>allan</div> <div><br></div> </div> <div id="CanarySig"> <div> <div style="font-family:Helvetica;">--<br>Sent from <a href="https://canarymail.io">Canary</a></div> <div><br></div> </div> </div> <div id="CanaryDropbox"> </div> <blockquote id="CanaryBlockquote"> <div> <div>On Thursday, May 08, 2025 at 12:34, David Brossard via Openid-specs-authzen <<a href="mailto:openid-specs-authzen@lists.openid.net">openid-specs-authzen@lists.openid.net</a>> wrote:<br></div> <div><div dir="ltr"><div>Hi all,<br></div><div><br></div><div>Interesting use case from EIC: I want to write a policy that determines how a loan-to-be can be created.</div><div><br></div><div>Managers can create a loan for a customer in their region up to their max allowed amount for the employee (and/or customer).</div><div><br></div><div>The request would then be:</div><div><ul><li>Can Alice the employee create loan with amount 1234?</li></ul>In this type of request, because the loan hasn't been created we do not have a loan ID or resource ID. But, because AuthZEN makes the resource ID mandatory in the evaluation API, what approach do we want to recommend?</div><div><br></div><div>David </div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"></div></div> -- <br>Openid-specs-authzen mailing list <br>Openid-specs-authzen@lists.openid.net <br>https://lists.openid.net/mailman/listinfo/openid-specs-authzen <br></div> </div> </blockquote> </body></html>