fix(create-policy): create and skip if exists (#698)

uc-cdis · Sep 18, 2019 · 79ca3cf · 79ca3cf
1 parent 4e80b35
commit 79ca3cf
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/fence/sync/sync_users.py b/fence/sync/sync_users.py
@@ -1074,7 +1074,9 @@ def _update_arborist(self, session, user_yaml):
         policies = user_yaml.rbac.get("policies", [])
         for policy in policies:
             try:
-                response = self.arborist_client.put_policy(policy)
+                response = self.arborist_client.create_policy(
+                    policy, skip_if_exists=True
+                )
                 if response:
                     self._created_policies.add(policy["id"])
             except ArboristError as e:
@@ -1188,13 +1190,14 @@ def _update_authz_in_arborist(self, session, user_projects, user_yaml=None):
                         policy_id = _format_policy_id(path, permission)
                         if policy_id not in self._created_policies:
                             try:
-                                self.arborist_client.put_policy(
+                                self.arborist_client.create_policy(
                                     {
                                         "id": policy_id,
                                         "description": "policy created by fence sync",
                                         "role_ids": [permission],
                                         "resource_paths": [path],
-                                    }
+                                    },
+                                    skip_if_exists=True,
                                 )
                             except ArboristError as e:
                                 self.logger.info(