Merge 4d4273b into f6bf0ec

broadinstitute · Mar 28, 2019 · 5910cf1 · 5910cf1
2 parents f6bf0ec + 4d4273b
commit 5910cf1
Showing 1 changed file with 22 additions and 4 deletions.
diff --git a/src/main/resources/reference.conf b/src/main/resources/reference.conf
@@ -411,11 +411,17 @@ resourceTypes = {
       "share_policy::steward" = {
         description = "Can grant and revoke a users' steward permission"
       }
+      "read_policies" = {
+        description = "Can read policies"
+      }
+      "alter_policies" = {
+        description = "Can alter policies"
+      }
     }
     ownerRoleName = "steward"
     roles = {
       steward = {
-        roleActions = ["create_study", "share_policy::steward"]
+        roleActions = ["create_study", "share_policy::steward", "read_policies", "alter_policies"]
       }
     }
     reuseIds = true
@@ -446,11 +452,17 @@ resourceTypes = {
       "share_policy::ingester" = {
         description = "Can grant and revoke a users' ingester permission"
       }
+      "read_policies" = {
+        description = "Can read policies"
+      }
+      "alter_policies" = {
+        description = "Can alter policies"
+      }
     }
     ownerRoleName = "steward"
     roles = {
       steward = {
-        roleActions = ["delete",  "edit_study",  "ingest_data",  "update_data",  "create_dataset",  "share_policy::steward", "share_policy::custodian", "share_policy::ingester"]
+        roleActions = ["delete",  "edit_study",  "ingest_data",  "update_data",  "create_dataset",  "share_policy::steward", "share_policy::custodian", "share_policy::ingester", "read_policies", "alter_policies"]
       }
       custodian = {
         roleActions = ["create_dataset"]
@@ -487,14 +499,20 @@ resourceTypes = {
       "share_policy::discoverer" = {
         description = "Can grant and revoke a users' discover permission"
       }
+      "read_policies" = {
+        description = "Can read policies"
+      }
+      "alter_policies" = {
+        description = "Can alter policies"
+      }
     }
     ownerRoleName = "steward"
     roles = {
       steward = {
-        roleActions = ["delete",  "edit_dataset",  "read_data",  "discover_data",  "share_policy::steward", "share_policy::custodian", "share_policy::reader",  "share_policy::discoverer"]
+        roleActions = ["delete",  "edit_dataset",  "read_data",  "discover_data",  "share_policy::steward", "share_policy::custodian", "share_policy::reader",  "share_policy::discoverer", "read_policies", "alter_policies"]
       }
       custodian = {
-        roleActions = ["delete",  "edit_dataset",  "read_data",  "discover_data",  "share_policy::reader",  "share_policy::discoverer"]
+        roleActions = ["delete",  "edit_dataset",  "read_data",  "discover_data",  "share_policy::reader",  "share_policy::discoverer", "read_policies"]
       }
       discoverer = {
         roleActions = ["discover_data"]