partial evaluation return unknown value

[jaredzhou]

Version: opa linux client 0.47
res.rego

package res

allow {                                    
    has_role                         
}

has_role {
# user_role := data.project.user_roles[_]
  user_role := data[input.res.type].user_roles[_]
  user_role.user_name == input.user.name
}

input.json

{
    "user": {
        "name": "jared"
    },
    "action": "read",
    "res": {
        "type": "project"
    }
}

command

opa eval  -d ./res.rego   -i input.json -u data.project.user_roles -p "data.res.allow"

and it report an error

{
  "errors": [
    {
      "message": "unknown value"
    }
  ]
}

when i change user_role := data[input.res.type].user_roles[_] to user_role := data.project.user_roles[_] which is the same since input.res.type is project. i don't know if it's a bug, but it's a feature i want, so i can choose res_type from input

[srenatus]

Thanks for the report. Someone will have to dig in a bit more, this isn't obvious. I think what you're suggesting is alright. (💭 Perhaps it's even related to #5470?)

[stale]

This issue has been automatically marked as inactive because it has not had any activity in the last 30 days.

[stale]

This issue has been automatically marked as inactive because it has not had any activity in the last 30 days.