5 lines
256 B
Nix
5 lines
256 B
Nix
|
{ cert, group, groups, user }: {
|
||
|
|
assertion = cert.group == group || builtins.any (u: u == user) groups.${cert.group}.members;
|
||
|
|
message = "Group for certificate ${cert.domain} must be ${group}, or user ${user} must be a member of group ${cert.group}";
|
||
|
|
}
|