fix(rules): add policy for resource credential

restorecommerce · May 10, 2024 · e8eeda4 · e8eeda4
1 parent 30c814f
commit e8eeda4
Showing 1 changed file with 25 additions and 0 deletions.
diff --git a/datasets/system/data/seed-data/policies.yaml b/datasets/system/data/seed-data/policies.yaml
@@ -195,6 +195,31 @@
           - id: urn:restorecommerce:acs:names:ownerInstance
             value: system
   combiningAlgorithm: urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-overrides
+---
+  id: credential-policy
+  name: Credential Policy
+  description: Policy for resource Credential
+  evaluationCacheable: false
+  effect: PERMIT
+  target:
+    actions: [ ]
+    subjects: [ ]
+    resources:
+      - id: urn:restorecommerce:acs:names:model:entity
+        value: urn:restorecommerce:acs:model:credential.Credental
+  rules:
+    - superadministrator-permits-all
+    - user-permits-all-owned
+    - fallback-deny-all
+  meta:
+    modifiedBy: ""
+    owners:
+      - id: urn:restorecommerce:acs:names:ownerIndicatoryEntity
+        value: urn:restorecommerce:acs:model:organization.Organization
+        attributes:
+          - id: urn:restorecommerce:acs:names:ownerInstance
+            value: system
+  combiningAlgorithm: urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-overrides
 ---
   id: fulfillment-courier-policy
   name: FulfillmentCourier Policy