From 0257ae4489697828dbf9f55b55659e4ce3ed0151 Mon Sep 17 00:00:00 2001 From: Aditya Arora Date: Wed, 1 Nov 2023 20:59:31 +0530 Subject: [PATCH 1/2] add access control config and sample policy entries --- access_control.conf | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 access_control.conf diff --git a/access_control.conf b/access_control.conf new file mode 100644 index 0000000..fb1f395 --- /dev/null +++ b/access_control.conf @@ -0,0 +1,26 @@ +[request_definition] +r = sub, obj, act + +[policy_definition] +p = sub, obj, act + +[role_definition] +g = _, _ + +[policy_effect] +e = some(where (p.eft == allow)) + +[matchers] +m = r.sub == p.sub && g(r.obj, p.obj) && r.act == p.act + + +# model definitions for cloud-registry +# p, alice, maintainer, /ga4gh/registry/v1/1/services +# p, bob, owner, /ga4gh/registry/v1/1/services +# p, joe, admin, /ga4gh/registry/v1/service-info + +# g, maintainer, PUT +# g, owner, DELETE +# g, owner, PUT +# g, admin, PUT + From 2b36980740852107d2a6f100f0af4652bfcf7f8f Mon Sep 17 00:00:00 2001 From: Aditya Arora Date: Wed, 1 Nov 2023 21:22:37 +0530 Subject: [PATCH 2/2] update comments --- access_control.conf | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/access_control.conf b/access_control.conf index fb1f395..fbfd1c3 100644 --- a/access_control.conf +++ b/access_control.conf @@ -14,11 +14,14 @@ e = some(where (p.eft == allow)) m = r.sub == p.sub && g(r.obj, p.obj) && r.act == p.act -# model definitions for cloud-registry +# access model definitions for cloud-registry + +# policy definitions # p, alice, maintainer, /ga4gh/registry/v1/1/services # p, bob, owner, /ga4gh/registry/v1/1/services # p, joe, admin, /ga4gh/registry/v1/service-info +# role definitions # g, maintainer, PUT # g, owner, DELETE # g, owner, PUT