Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MESH-422 | Empower Admin to have access to ALL data products functionality without needing any policies #4229

Open
wants to merge 7 commits into
base: master
Choose a base branch
from
Open

MESH-422 | Empower Admin to have access to ALL data products functionality without needing any policies #4229

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
ffc15b1
feat: empower admin
ankitpatnaik-atlan Feb 18, 2025
319745c
enabling data product policy
ankitpatnaik-atlan Feb 20, 2025
8b14c9b
updating metadata policy priority
ankitpatnaik-atlan Feb 20, 2025
8edc035
update data domain policy priority
ankitpatnaik-atlan Feb 20, 2025
cd8edd8
new relationship bootstrap policies for stakeholder and output/input …
ankitpatnaik-atlan Feb 20, 2025
41dfebd
corrected name for product-asset policy
ankitpatnaik-atlan Feb 21, 2025
86856e9
changing the policy priority of new policies
ankitpatnaik-atlan Feb 21, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 6 additions & 4 deletions addons/policies/bootstrap_entity_policies.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2116,6 +2116,7 @@
"policySubCategory": "default",
"policyServiceName": "atlas",
"policyType": "allow",
"policyPriority": 1,
"policyUsers":
[
"admin",
Expand Down Expand Up @@ -2981,14 +2982,14 @@
"typeName": "AuthPolicy",
"attributes":
{
"name": "CUD_DATA_PRODUCT_ENTITY",
"qualifiedName": "CUD_DATA_PRODUCT_ENTITY",
"name": "CRUD_DATA_PRODUCT_ENTITY",
"qualifiedName": "CRUD_DATA_PRODUCT_ENTITY",
"description": "Allows user to perform cud operation on DataProduct assets.",
"policyCategory": "bootstrap",
"policySubCategory": "default",
"policyServiceName": "atlas",
"policyType": "allow",
"policyPriority": 0,
"policyPriority": 1,
"policyUsers":
[],
"policyGroups":
Expand All @@ -2999,7 +3000,7 @@
"$api-token-default-access"
],
"policyResourceCategory": "ENTITY",
"isPolicyEnabled": false,
"isPolicyEnabled": true,
"policyResources":
[
"entity-type:DataProduct",
Expand All @@ -3008,6 +3009,7 @@
],
"policyActions":
[
"entity-read",
"entity-create",
"entity-update",
"entity-delete"
Expand Down
234 changes: 234 additions & 0 deletions addons/policies/bootstrap_relationship_policies.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -993,6 +993,240 @@
"remove-relationship"
]
}
},
{
"typeName": "AuthPolicy",
"attributes":
{
"name": "LINK_MESH_DATA_DOMAIN_TO_STAKE_HOLDER",
"qualifiedName": "LINK_MESH_DATA_DOMAIN_TO_STAKE_HOLDER",
"policyCategory": "bootstrap",
"policySubCategory": "default",
"policyServiceName": "atlas",
"policyType": "allow",
"policyPriority": 1,
"policyUsers":
[],
"policyGroups":
[],
"policyRoles":
[
"$admin",
"$api-token-default-access"
],
"policyResourceCategory": "RELATIONSHIP",
"policyResources":
[
"relationship-type:*",
"end-one-entity-type:DataDomain",
"end-one-entity-classification:*",
"end-one-entity:{entity}",
"end-two-entity-type:Stakeholder",
"end-two-entity-classification:*",
"end-two-entity:default/*/{entity}"
],
"policyActions":
[
"add-relationship",
"update-relationship",
"remove-relationship"
]
}
},
{
"typeName": "AuthPolicy",
"attributes":
{
"name": "LINK_STAKEHOLDER_TITLE_TO_DATA_DOMAIN_STAKEHOLDER",
"qualifiedName": "LINK_STAKEHOLDER_TITLE_TO_DATA_DOMAIN_STAKEHOLDER",
"policyCategory": "bootstrap",
"policySubCategory": "default",
"policyServiceName": "atlas",
"policyType": "allow",
"policyPriority": 1,
"policyUsers":
[],
"policyGroups":
[],
"policyRoles":
[
"$admin",
"$api-token-default-access"
],
"policyResourceCategory": "RELATIONSHIP",
"policyResources":
[
"relationship-type:*",
"end-one-entity-type:StakeholderTitle",
"end-one-entity-classification:*",
"end-one-entity:*",
"end-two-entity-type:Stakeholder",
"end-two-entity-classification:*",
"end-two-entity:default/*/{entity}"
],
"policyActions":
[
"add-relationship",
"update-relationship",
"remove-relationship"
]
}
},
{
"typeName": "AuthPolicy",
"attributes":
{
"name": "LINK_MESH_DATA_SUB_DOMAIN_TO_STAKE_HOLDER",
"qualifiedName": "LINK_MESH_DATA_SUB_DOMAIN_TO_STAKE_HOLDER",
"policyCategory": "bootstrap",
"policySubCategory": "default",
"policyServiceName": "atlas",
"policyType": "allow",
"policyPriority": 1,
"policyUsers":
[],
"policyGroups":
[],
"policyRoles":
[
"$admin",
"$api-token-default-access"
],
"policyResourceCategory": "RELATIONSHIP",
"policyResources":
[
"relationship-type:*",
"end-one-entity-type:DataDomain",
"end-one-entity-classification:*",
"end-one-entity:{entity}/*domain/*",
"end-two-entity-type:Stakeholder",
"end-two-entity-classification:*",
"end-two-entity:default/*/{entity}/*"
],
"policyActions":
[
"add-relationship",
"update-relationship",
"remove-relationship"
]
}
},
{
"typeName": "AuthPolicy",
"attributes":
{
"name": "LINK_STAKEHOLDER_TITLE_TO_DATA_SUB_DOMAIN_STAKEHOLDER",
"qualifiedName": "LINK_STAKEHOLDER_TITLE_TO_DATA_SUB_DOMAIN_STAKEHOLDER",
"policyCategory": "bootstrap",
"policySubCategory": "default",
"policyServiceName": "atlas",
"policyType": "allow",
"policyPriority": 1,
"policyUsers":
[],
"policyGroups":
[],
"policyRoles":
[
"$admin",
"$api-token-default-access"
],
"policyResourceCategory": "RELATIONSHIP",
"policyResources":
[
"relationship-type:*",
"end-one-entity-type:StakeholderTitle",
"end-one-entity-classification:*",
"end-one-entity:*",
"end-two-entity-type:Stakeholder",
"end-two-entity-classification:*",
"end-two-entity:default/*/{entity}/*"
],
"policyActions":
[
"add-relationship",
"update-relationship",
"remove-relationship"
]
}
},
{
"typeName": "AuthPolicy",
"attributes":
{
"name": "LINK_ASSET_TO_MESH_DATA_PRODUCT",
"qualifiedName": "LINK_ASSET_TO_MESH_DATA_PRODUCT",
"policyCategory": "bootstrap",
"policySubCategory": "default",
"policyServiceName": "atlas",
"policyType": "allow",
"policyPriority": 1,
"policyUsers":
[],
"policyGroups":
[],
"policyRoles":
[
"$admin",
"$api-token-default-access"
],
"policyResourceCategory": "RELATIONSHIP",
"policyResources":
[
"relationship-type:*",
"end-one-entity-type:Asset",
"end-one-entity-classification:*",
"end-one-entity:*",
"end-two-entity-type:DataProduct",
"end-two-entity-classification:*",
"end-two-entity:{entity}/*product/*"
],
"policyActions":
[
"add-relationship",
"update-relationship",
"remove-relationship"
]
}
},
{
"typeName": "AuthPolicy",
"attributes":
{
"name": "LINK_MESH_DATA_PRODUCT_TO_ASSET",
"qualifiedName": "LINK_MESH_DATA_PRODUCT_TO_ASSET",
"policyCategory": "bootstrap",
"policySubCategory": "default",
"policyServiceName": "atlas",
"policyType": "allow",
"policyPriority": 1,
"policyUsers":
[],
"policyGroups":
[],
"policyRoles":
[
"$admin",
"$api-token-default-access"
],
"policyResourceCategory": "RELATIONSHIP",
"policyResources":
[
"relationship-type:*",
"end-one-entity-type:DataProduct",
"end-one-entity-classification:*",
"end-one-entity:{entity}/*product/*",
"end-two-entity-type:Asset",
"end-two-entity-classification:*",
"end-two-entity:*"
],
"policyActions":
[
"add-relationship",
"update-relationship",
"remove-relationship"
]
}
}
]
}
Loading