https://github.com/metadatacenter/cedar-project/issues/1198

metadatacenter · Nov 8, 2023 · 8c8d9e8 · 8c8d9e8
1 parent 0401910
commit 8c8d9e8
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/src/main/java/org/metadatacenter/server/security/model/CedarObjectConstants.java b/src/main/java/org/metadatacenter/server/security/model/CedarObjectConstants.java
@@ -6,6 +6,8 @@ public final class CedarObjectConstants {
 
   public static final String SEARCH_INDEX = "search_index";
   public static final String RULES_INDEX = "rules_index";
+  public static final String INCLUSION_SUBGRAPH = "inclusion_subgraph";
+
   public static final String LOGGED_IN = "logged_in";
   public static final String NOT_READABLE_NODE = "not_readable_node";
   public static final String NOT_WRITABLE_NODE = "not_writable_node";

diff --git a/src/main/java/org/metadatacenter/server/security/model/auth/CedarPermission.java b/src/main/java/org/metadatacenter/server/security/model/auth/CedarPermission.java
@@ -46,14 +46,12 @@ public enum CedarPermission {
   LOGGED_IN(CedarObjectConstants.LOGGED_IN, CedarObjectConstants.ACCESS_READ),
   SEARCH_INDEX_REINDEX(CedarObjectConstants.SEARCH_INDEX, CedarObjectConstants.ACCESS_CREATE),
   RULES_INDEX_REINDEX(CedarObjectConstants.RULES_INDEX, CedarObjectConstants.ACCESS_CREATE),
-
-  UPDATE_PERMISSION_NOT_WRITABLE_NODE(CedarObjectConstants.NOT_WRITABLE_NODE_PERMISSIONS, CedarObjectConstants
-      .ACCESS_UPDATE),
+  INCLUSION_SUBGRAPH_RECREATE(CedarObjectConstants.INCLUSION_SUBGRAPH, CedarObjectConstants.ACCESS_CREATE),
+  UPDATE_PERMISSION_NOT_WRITABLE_NODE(CedarObjectConstants.NOT_WRITABLE_NODE_PERMISSIONS, CedarObjectConstants.ACCESS_UPDATE),
   READ_NOT_READABLE_NODE(CedarObjectConstants.NOT_READABLE_NODE, CedarObjectConstants.ACCESS_READ),
   WRITE_NOT_WRITABLE_NODE(CedarObjectConstants.NOT_WRITABLE_NODE, CedarObjectConstants.ACCESS_WRITE),
   WRITE_NOT_WRITABLE_CATEGORY(CedarObjectConstants.NOT_WRITABLE_CATEGORY, CedarObjectConstants.ACCESS_WRITE),
-  UPDATE_PERMISSION_NOT_WRITABLE_CATEGORY(CedarObjectConstants.NOT_WRITABLE_CATEGORY_PERMISSIONS,
-      CedarObjectConstants.ACCESS_UPDATE),
+  UPDATE_PERMISSION_NOT_WRITABLE_CATEGORY(CedarObjectConstants.NOT_WRITABLE_CATEGORY_PERMISSIONS, CedarObjectConstants.ACCESS_UPDATE),
   SEND_PROCESS_MESSAGE(CedarObjectConstants.PROCESS_MESSAGE, CedarObjectConstants.ACCESS_CREATE),
   UPDATE_NOT_ADMINISTERED_GROUP(CedarObjectConstants.NOT_ADMINISTERED_GROUP, CedarObjectConstants.ACCESS_UPDATE),