feat(rbac): implement a file watcher for csv reloads

janus-idp · Apr 30, 2024 · d833fb5 · d833fb5
1 parent 577efff
commit d833fb5
Show file tree

Hide file tree

Showing 21 changed files with 1,072 additions and 1,550 deletions.
diff --git a/plugins/rbac-backend/package.json b/plugins/rbac-backend/package.json
@@ -39,6 +39,8 @@
     "@janus-idp/backstage-plugin-rbac-common": "1.4.1",
     "@janus-idp/backstage-plugin-rbac-node": "1.1.0",
     "casbin": "^5.27.1",
+    "chokidar": "^3.6.0",
+    "csv-parse": "^5.5.5",
     "express": "^4.18.2",
     "express-promise-router": "^4.1.1",
     "knex": "^3.0.0",

diff --git a/plugins/rbac-backend/src/__fixtures__/data/invalid-csv/duplicate-policies-actions.csv b/plugins/rbac-backend/src/__fixtures__/data/invalid-csv/duplicate-policies-actions.csv
diff --git a/plugins/rbac-backend/src/__fixtures__/data/invalid-csv/duplicate-policy.csv b/plugins/rbac-backend/src/__fixtures__/data/invalid-csv/duplicate-policy.csv
@@ -7,3 +7,6 @@ p, role:default/catalog-writer, catalog.entity.create, use, allow
 p, role:default/catalog-writer, catalog.entity.create, use, allow
 
 p, role:default/catalog-writer, catalog-entity, delete, allow
+
+p, role:default/duplication-effect, catalog-entity, update, allow
+p, role:default/duplication-effect, catalog-entity, update, deny
diff --git a/plugins/rbac-backend/src/__fixtures__/data/invalid-csv/entityref-policy.csv b/plugins/rbac-backend/src/__fixtures__/data/invalid-csv/entityref-policy.csv
diff --git a/plugins/rbac-backend/src/__fixtures__/data/invalid-csv/error-policy.csv b/plugins/rbac-backend/src/__fixtures__/data/invalid-csv/error-policy.csv
@@ -0,0 +1,4 @@
+g, user:default/, role:default/catalog-deleter
+g, user:default/test, role:default/
+p, role:default/, catalog.entity.create, use, allow
+p, role:default/test, catalog.entity.create, delete, temp
diff --git a/plugins/rbac-backend/src/__fixtures__/data/invalid-csv/permission-policy.csv b/plugins/rbac-backend/src/__fixtures__/data/invalid-csv/permission-policy.csv
diff --git a/plugins/rbac-backend/src/__fixtures__/data/invalid-csv/role-entityref-policy.csv b/plugins/rbac-backend/src/__fixtures__/data/invalid-csv/role-entityref-policy.csv
diff --git a/plugins/rbac-backend/src/__fixtures__/data/valid-csv/simple-policy.csv b/plugins/rbac-backend/src/__fixtures__/data/valid-csv/simple-policy.csv
@@ -0,0 +1,2 @@
+g, user:default/guest, role:default/catalog-writer
+p, role:default/catalog-writer, catalog-entity, update, allow
diff --git a/plugins/rbac-backend/src/__fixtures__/data/valid-csv/updated-rbac-policy.csv b/plugins/rbac-backend/src/__fixtures__/data/valid-csv/updated-rbac-policy.csv