chore: release

Dockerfile

@@ -1,5 +1,5 @@
 ### Build
-FROM node:20.11.1-alpine3.19 as build
+FROM node:22.2.0-alpine3.20 as build
 ENV NO_UPDATE_NOTIFIER=true
 
 USER node
@@ -13,7 +13,7 @@ RUN npm run build
 
 
 ### Deployment
-FROM node:20.11.1-alpine3.19 as deployment
+FROM node:22.2.0-alpine3.20 as deployment
 
 ENV NO_UPDATE_NOTIFIER=true
 
@@ -22,6 +22,7 @@ ARG APP_HOME=/home/node/srv
 WORKDIR $APP_HOME
 
 COPY --chown=node:node ./cfg $APP_HOME/cfg/
+COPY --chown=node:node ./data $APP_HOME/data/
 COPY --chown=node:node --from=build $APP_HOME/lib/ $APP_HOME/lib/
 
 EXPOSE 50051

cfg/config.json

@@ -119,12 +119,6 @@
       "configUpdateResponse": {
         "messageObject": "io.restorecommerce.commandinterface.CommandResponse"
       },
-      "setApiKeyCommand": {
-        "messageObject": "io.restorecommerce.commandinterface.CommandRequest"
-      },
-      "setApiKeyResponse": {
-        "messageObject": "io.restorecommerce.commandinterface.CommandResponse"
-      },
       "flushCacheCommand": {
         "messageObject": "io.restorecommerce.commandinterface.CommandRequest"
       },
@@ -176,7 +170,6 @@
             "restoreCommand",
             "resetCommand",
             "configUpdateCommand",
-            "setApiKeyCommand",
             "flushCacheCommand"
           ]
         },
@@ -315,5 +308,10 @@
         "entities": ["rules", "policies", "policy_sets"]
       }
     ]
+  },
+  "seed_data": {
+    "policy_set" : "./data/seed_data/policy_sets.yaml",
+    "policy": "./data/seed_data/policies.yaml",
+    "rule": "./data/seed_data/rules.yaml"
   }
 }

data/seed_data/policies.yaml

@@ -0,0 +1,14 @@
+- id: super_admin_policy_id
+  name: Super Admin Policy
+  description: Targets actions for all resources
+  rules:
+    - super_admin_rule_id
+  combining_algorithm: urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-overrides
+  evaluation_cacheable: true
+  meta:
+    owners:
+      - id: urn:restorecommerce:acs:names:ownerIndicatoryEntity
+        value: urn:restorecommerce:acs:model:organization.Organization
+        attributes:
+          - id: urn:restorecommerce:acs:names:ownerInstance
+            value: system

data/seed_data/policy_sets.yaml

@@ -0,0 +1,13 @@
+- id: global_policy_set_id
+  name: Global Policy Set
+  description: Contains SuperAdmin policy
+  combining_algorithm: urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-overrides
+  policies:
+    - super_admin_policy_id
+  meta:
+    owners:
+      - id: urn:restorecommerce:acs:names:ownerIndicatoryEntity
+        value: urn:bmslsa:acs:model:organization.Organization
+        attributes:
+          - id: urn:restorecommerce:acs:names:ownerInstance
+            value: system

data/seed_data/rules.yaml

@@ -0,0 +1,16 @@
+- id: super_admin_rule_id
+  name: SuperAdmins Rule
+  description: Permit anything for Super Admins
+  target:
+    subjects:
+      - id: urn:restorecommerce:acs:names:role
+        value: superadministrator-r-id
+  effect: PERMIT
+  evaluation_cacheable: true
+  meta:
+    owners:
+      - id: urn:restorecommerce:acs:names:ownerIndicatoryEntity
+        value: urn:bmslsa:acs:model:organization.Organization
+        attributes:
+          - id: urn:restorecommerce:acs:names:ownerInstance
+            value: system