yujunjun/datahub
2
0
Fork 0
mirror of https://github.com/datahub-project/datahub.git synced 2025-11-09 07:53:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

add new CREATE and UPDATE privileges for USERS_AND_GROUPS (#11364)

Browse Source 
Co-authored-by: Hendrik Richert <hendrik.richert@swisscom.com>
This commit is contained in:
Hendrik Richert 2024-10-04 19:54:41 +02:00 committed by GitHub
parent 04349cb9cd
commit 18562000f8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 22 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
metadata-utils/src/main/java/com/linkedin/metadata/authorization/PoliciesConfig.java
View File

@ -59,6 +59,18 @@ public class PoliciesConfig {
"Manage Users & Groups", "Manage Users & Groups",
"Create, remove, and update users and groups on DataHub."); "Create, remove, and update users and groups on DataHub.");
static final Privilege CREATE_USERS_AND_GROUPS_PRIVILEGE =
Privilege.of(
"CREATE_USERS_AND_GROUPS",
"Create Users & Groups",
"Create users and groups on DataHub.");
static final Privilege UPDATE_USERS_AND_GROUPS_PRIVILEGE =
Privilege.of(
"UPDATE_USERS_AND_GROUPS",
"Update Users & Groups",
"Update users and groups on DataHub.");
private static final Privilege VIEW_ANALYTICS_PRIVILEGE = private static final Privilege VIEW_ANALYTICS_PRIVILEGE =
Privilege.of("VIEW_ANALYTICS", "View Analytics", "View the DataHub analytics dashboard."); Privilege.of("VIEW_ANALYTICS", "View Analytics", "View the DataHub analytics dashboard.");
@ -177,6 +189,8 @@ public class PoliciesConfig {
ImmutableList.of( ImmutableList.of(
MANAGE_POLICIES_PRIVILEGE, MANAGE_POLICIES_PRIVILEGE,
MANAGE_USERS_AND_GROUPS_PRIVILEGE, MANAGE_USERS_AND_GROUPS_PRIVILEGE,
CREATE_USERS_AND_GROUPS_PRIVILEGE,
UPDATE_USERS_AND_GROUPS_PRIVILEGE,
VIEW_ANALYTICS_PRIVILEGE, VIEW_ANALYTICS_PRIVILEGE,
GET_ANALYTICS_PRIVILEGE, GET_ANALYTICS_PRIVILEGE,
MANAGE_DOMAINS_PRIVILEGE, MANAGE_DOMAINS_PRIVILEGE,
@ -926,13 +940,15 @@ public class PoliciesConfig {
ImmutableMap.<ApiOperation, Disjunctive<Conjunctive<Privilege>>>builder() ImmutableMap.<ApiOperation, Disjunctive<Conjunctive<Privilege>>>builder()
.put( .put(
ApiOperation.CREATE, ApiOperation.CREATE,
Disjunctive.disjoint(MANAGE_USERS_AND_GROUPS_PRIVILEGE)) Disjunctive.disjoint(
CREATE_USERS_AND_GROUPS_PRIVILEGE, MANAGE_USERS_AND_GROUPS_PRIVILEGE))
.put( .put(
ApiOperation.READ, ApiOperation.READ,
API_PRIVILEGE_MAP.get(ApiGroup.ENTITY).get(ApiOperation.READ)) API_PRIVILEGE_MAP.get(ApiGroup.ENTITY).get(ApiOperation.READ))
.put( .put(
ApiOperation.UPDATE, ApiOperation.UPDATE,
Disjunctive.disjoint(MANAGE_USERS_AND_GROUPS_PRIVILEGE)) Disjunctive.disjoint(
UPDATE_USERS_AND_GROUPS_PRIVILEGE, MANAGE_USERS_AND_GROUPS_PRIVILEGE))
.put( .put(
ApiOperation.DELETE, ApiOperation.DELETE,
Disjunctive.disjoint(MANAGE_USERS_AND_GROUPS_PRIVILEGE)) Disjunctive.disjoint(MANAGE_USERS_AND_GROUPS_PRIVILEGE))
@ -945,13 +961,15 @@ public class PoliciesConfig {
ImmutableMap.<ApiOperation, Disjunctive<Conjunctive<Privilege>>>builder() ImmutableMap.<ApiOperation, Disjunctive<Conjunctive<Privilege>>>builder()
.put( .put(
ApiOperation.CREATE, ApiOperation.CREATE,
Disjunctive.disjoint(MANAGE_USERS_AND_GROUPS_PRIVILEGE)) Disjunctive.disjoint(
CREATE_USERS_AND_GROUPS_PRIVILEGE, MANAGE_USERS_AND_GROUPS_PRIVILEGE))
.put( .put(
ApiOperation.READ, ApiOperation.READ,
API_PRIVILEGE_MAP.get(ApiGroup.ENTITY).get(ApiOperation.READ)) API_PRIVILEGE_MAP.get(ApiGroup.ENTITY).get(ApiOperation.READ))
.put( .put(
ApiOperation.UPDATE, ApiOperation.UPDATE,
Disjunctive.disjoint(MANAGE_USERS_AND_GROUPS_PRIVILEGE)) Disjunctive.disjoint(
UPDATE_USERS_AND_GROUPS_PRIVILEGE, MANAGE_USERS_AND_GROUPS_PRIVILEGE))
.put( .put(
ApiOperation.DELETE, ApiOperation.DELETE,
Disjunctive.disjoint(MANAGE_USERS_AND_GROUPS_PRIVILEGE)) Disjunctive.disjoint(MANAGE_USERS_AND_GROUPS_PRIVILEGE))