Merge pull request #2264 from atlanhq/fix/gov-1259

[Staging] Fix/gov 1259 - Add deny data access policy for all the guest
atlanhq · Aug 14, 2023 · 8ec0f3b · 8ec0f3b
2 parents 0804a11 + 29ba6f0
commit 8ec0f3b
Showing 1 changed file with 35 additions and 0 deletions.
diff --git a/addons/policies/bootstrap_heka_policies.json b/addons/policies/bootstrap_heka_policies.json
@@ -0,0 +1,35 @@
+{
+  "entities":
+  [
+    {
+    "typeName": "AuthPolicy",
+    "attributes":
+    {
+      "name": "DENY_DATA_ACCESS_GUEST",
+      "qualifiedName": "DENY_DATA_ACCESS_GUEST",
+      "description": "deny data access for guest users",
+      "policyCategory": "bootstrap",
+      "policySubCategory": "data",
+      "policyServiceName": "heka",
+      "policyType": "deny",
+      "policyPriority": 0,
+      "policyUsers": [],
+      "policyGroups": [],
+      "policyRoles":
+      [
+        "$guest"
+      ],
+      "policyResourceCategory": "ENTITY",
+      "policyResources":
+      [
+        "entity:*",
+        "entity-type:*"
+      ],
+      "policyActions":
+      [
+        "select"
+      ]
+    }
+    }
+  ]
+}