From 4c614948d932c6196a5a8fa8fcb2b3fcd67569cb Mon Sep 17 00:00:00 2001 From: Gerald Baulig Date: Thu, 24 Oct 2024 17:03:12 +0200 Subject: [PATCH] policy --- datasets/system/data/seed-data/policies.yaml | 24 +++++++++++++++++++ .../system/data/seed-data/policy_sets.yaml | 1 + 2 files changed, 25 insertions(+) diff --git a/datasets/system/data/seed-data/policies.yaml b/datasets/system/data/seed-data/policies.yaml index 48f60ef..9c54a19 100644 --- a/datasets/system/data/seed-data/policies.yaml +++ b/datasets/system/data/seed-data/policies.yaml @@ -333,6 +333,30 @@ - id: urn:restorecommerce:acs:names:ownerInstance value: system combiningAlgorithm: urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-overrides +--- + id: fulfillment-evaluate-policy + name: Fulfillment Evaluate Policy + description: Policy for operation Evaluate Fulfillments + evaluationCacheable: false + effect: PERMIT + target: + actions: [ ] + subjects: [ ] + resources: + - id: urn:restorecommerce:acs:names:operation + value: execution.evaluateFulfillments + rules: + - administrator-permits-all-hr-scoped + - sales-permits-all-hr-scoped + - fallback-deny-all + meta: + owners: + - id: urn:restorecommerce:acs:names:ownerIndicatoryEntity + value: urn:restorecommerce:acs:model:organization.Organization + attributes: + - id: urn:restorecommerce:acs:names:ownerInstance + value: system + combiningAlgorithm: urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-overrides --- id: invoice-policy name: Invoice Policy diff --git a/datasets/system/data/seed-data/policy_sets.yaml b/datasets/system/data/seed-data/policy_sets.yaml index 269a574..dd01fcd 100644 --- a/datasets/system/data/seed-data/policy_sets.yaml +++ b/datasets/system/data/seed-data/policy_sets.yaml @@ -19,6 +19,7 @@ - fulfillment-courier-policy - fulfillment-product-policy - fulfillment-policy + - fulfillment-evaluate-policy - fulfillment-submit-policy - invoice-policy - locale-policy