Merge pull request #2673 from atlanhq/fix/data-mesh-terms-policy

Fix/data mesh terms policy
atlanhq · Dec 19, 2023 · 3abedb6 · 3abedb6
2 parents ea81873 + 8ed4c79
commit 3abedb6
Showing 1 changed file with 58 additions and 6 deletions.
diff --git a/addons/static/templates/policy_cache_transformer_persona.json b/addons/static/templates/policy_cache_transformer_persona.json
@@ -394,9 +394,15 @@
       "resources": [
         "entity:{entity}",
         "entity-type:DataDomain",
-        "entity-classification:*"
+        "entity-classification:*",
+        "classification:*"
       ],
-      "actions": ["entity-update"]
+      "actions": [
+        "entity-update",
+        "entity-add-classification",
+        "entity-update-classification",
+        "entity-remove-classification"
+      ]
     },
     {
       "policyResourceCategory": "RELATIONSHIP",
@@ -455,6 +461,23 @@
         "end-two-entity:*"
       ],
       "actions": ["add-relationship", "update-relationship", "remove-relationship"]
+    },
+    {
+      "policyResourceCategory": "RELATIONSHIP",
+      "policyType": "ACCESS",
+      "description": "Link/unlink term to this Sub Domain",
+      "resources": [
+        "relationship-type:*",
+
+        "end-one-entity-type:AtlasGlossaryTerm",
+        "end-one-entity-classification:*",
+        "end-one-entity:*",
+
+        "end-two-entity-type:DataDomain",
+        "end-two-entity-classification:*",
+        "end-two-entity:{entity}"
+      ],
+      "actions": ["add-relationship", "update-relationship", "remove-relationship"]
     }
   ],
 
@@ -509,9 +532,15 @@
       "resources": [
         "entity:{entity}/*domain/*",
         "entity-type:DataDomain",
-        "entity-classification:*"
+        "entity-classification:*",
+        "classification:*"
       ],
-      "actions": ["entity-update"]
+      "actions": [
+        "entity-update",
+        "entity-add-classification",
+        "entity-update-classification",
+        "entity-remove-classification"
+      ]
     },
     {
       "policyResourceCategory": "RELATIONSHIP",
@@ -529,6 +558,23 @@
         "end-two-entity:*"
       ],
       "actions": ["add-relationship", "update-relationship", "remove-relationship"]
+    },
+    {
+      "policyResourceCategory": "RELATIONSHIP",
+      "policyType": "ACCESS",
+      "description": "Link/unlink term to this Sub Domain",
+      "resources": [
+        "relationship-type:*",
+
+        "end-one-entity-type:AtlasGlossaryTerm",
+        "end-one-entity-classification:*",
+        "end-one-entity:*",
+
+        "end-two-entity-type:DataDomain",
+        "end-two-entity-classification:*",
+        "end-two-entity:{entity}/*domain/*"
+      ],
+      "actions": ["add-relationship", "update-relationship", "remove-relationship"]
     }
   ],
   "persona-domain-sub-domain-delete": [
@@ -612,9 +658,15 @@
       "resources": [
         "entity:{entity}/*product/*",
         "entity-type:DataProduct",
-        "entity-classification:*"
+        "entity-classification:*",
+        "classification:*"
       ],
-      "actions": ["entity-update"]
+      "actions": [
+        "entity-update",
+        "entity-add-classification",
+        "entity-update-classification",
+        "entity-remove-classification"
+      ]
     },
     {
       "policyResourceCategory": "RELATIONSHIP",