Persona alias for product and sub-domain reads

atlanhq · Nov 30, 2023 · 81833a1 · 81833a1
1 parent fab17a8
commit 81833a1
Showing 1 changed file with 12 additions and 3 deletions.
diff --git a/repository/src/main/java/org/apache/atlas/repository/store/aliasstore/ESAliasStore.java b/repository/src/main/java/org/apache/atlas/repository/store/aliasstore/ESAliasStore.java
@@ -204,15 +204,24 @@ private void personaPolicyToESDslClauses(List<AtlasEntity> policies,
                         terms.add(glossaryQName);
                         allowClauseList.add(mapOf("wildcard", mapOf(QUALIFIED_NAME, "*@" + glossaryQName)));
                     }
-                } else if (getPolicyActions(policy).contains(ACCESS_READ_PERSONA_DOMAIN)
-                        || getPolicyActions(policy).contains(ACCESS_READ_PERSONA_SUB_DOMAIN)
-                        || getPolicyActions(policy).contains(ACCESS_READ_PERSONA_PRODUCT)) {
+                } else if (getPolicyActions(policy).contains(ACCESS_READ_PERSONA_DOMAIN)) {
 
                     for (String asset : assets) {
                         terms.add(asset);
                         allowClauseList.add(mapOf("wildcard", mapOf(QUALIFIED_NAME, asset + "/*")));
                     }
 
+                } else if (getPolicyActions(policy).contains(ACCESS_READ_PERSONA_SUB_DOMAIN)) {
+                    for (String asset : assets) {
+                        //terms.add(asset);
+                        allowClauseList.add(mapOf("wildcard", mapOf(QUALIFIED_NAME, asset + "/domain/*")));
+                    }
+
+                } else if (getPolicyActions(policy).contains(ACCESS_READ_PERSONA_PRODUCT)) {
+                    for (String asset : assets) {
+                        //terms.add(asset);
+                        allowClauseList.add(mapOf("wildcard", mapOf(QUALIFIED_NAME, asset + "/*/product/*")));
+                    }
                 }
             }