Merge pull request #2668 from atlanhq/fix/data-mesh-terms-policy

Fix/data mesh terms policy
atlanhq · Dec 18, 2023 · 0f9fb53 · 0f9fb53
2 parents d72148c + f2eb4a6
commit 0f9fb53
Showing 1 changed file with 52 additions and 3 deletions.
diff --git a/addons/static/templates/policy_cache_transformer_persona.json b/addons/static/templates/policy_cache_transformer_persona.json
@@ -396,7 +396,12 @@
         "entity-type:DataDomain",
         "entity-classification:*"
       ],
-      "actions": ["entity-update"]
+      "actions": [
+        "entity-update",
+        "entity-add-classification",
+        "entity-update-classification",
+        "entity-remove-classification"
+      ]
     },
     {
       "policyResourceCategory": "RELATIONSHIP",
@@ -455,6 +460,23 @@
         "end-two-entity:*"
       ],
       "actions": ["add-relationship", "update-relationship", "remove-relationship"]
+    },
+    {
+      "policyResourceCategory": "RELATIONSHIP",
+      "policyType": "ACCESS",
+      "description": "Link/unlink term to this Sub Domain",
+      "resources": [
+        "relationship-type:*",
+
+        "end-one-entity-type:AtlasGlossaryTerm",
+        "end-one-entity-classification:*",
+        "end-one-entity:*",
+
+        "end-two-entity-type:DataDomain",
+        "end-two-entity-classification:*",
+        "end-two-entity:{entity}"
+      ],
+      "actions": ["add-relationship", "update-relationship", "remove-relationship"]
     }
   ],
 
@@ -511,7 +533,12 @@
         "entity-type:DataDomain",
         "entity-classification:*"
       ],
-      "actions": ["entity-update"]
+      "actions": [
+        "entity-update",
+        "entity-add-classification",
+        "entity-update-classification",
+        "entity-remove-classification"
+      ]
     },
     {
       "policyResourceCategory": "RELATIONSHIP",
@@ -529,6 +556,23 @@
         "end-two-entity:*"
       ],
       "actions": ["add-relationship", "update-relationship", "remove-relationship"]
+    },
+    {
+      "policyResourceCategory": "RELATIONSHIP",
+      "policyType": "ACCESS",
+      "description": "Link/unlink term to this Sub Domain",
+      "resources": [
+        "relationship-type:*",
+
+        "end-one-entity-type:AtlasGlossaryTerm",
+        "end-one-entity-classification:*",
+        "end-one-entity:*",
+
+        "end-two-entity-type:DataDomain",
+        "end-two-entity-classification:*",
+        "end-two-entity:{entity}/*domain/*"
+      ],
+      "actions": ["add-relationship", "update-relationship", "remove-relationship"]
     }
   ],
   "persona-domain-sub-domain-delete": [
@@ -614,7 +658,12 @@
         "entity-type:DataProduct",
         "entity-classification:*"
       ],
-      "actions": ["entity-update"]
+      "actions": [
+        "entity-update",
+        "entity-add-classification",
+        "entity-update-classification",
+        "entity-remove-classification"
+      ]
     },
     {
       "policyResourceCategory": "RELATIONSHIP",