data upload
Support for new data upload flow.
Some major deployment changes:
- Fence configuration for data upload requires
DATA_UPLOAD_BUCKET
and S3 creds in fence config user.yaml
format for RBAC is changed; oldresources
block is still supported, but the proper way to organize the yaml file for user privileges is changed, and looks like this:
rbac:
policies:
- id: 'data_upload'
description: 'upload raw data files to S3'
role_ids: ['file_uploader']
resource_paths: ['/data_file']
resources:
- name: 'data_file'
- name: 'programs'
subresources:
- name: 'test'
subresources:
- name: 'projects'
subresources:
- name: 'test'
- name: 'test_program'
roles:
- id: 'file_uploader'
description: 'can upload data files'
permissions:
- id: 'file_upload'
action:
service: 'fence'
method: 'file_upload'
To grant users access for uploading data files, they need the corresponding data_upload
policy added:
users:
example_user@domain.com:
policies: ['data_upload']