Skip to content

data upload

Compare
Choose a tag to compare
@rudyardrichter rudyardrichter released this 16 Jan 18:14
· 2506 commits to master since this release
63f5421

Support for new data upload flow.

Some major deployment changes:

  • Fence configuration for data upload requires DATA_UPLOAD_BUCKET and S3 creds in fence config
  • user.yaml format for RBAC is changed; old resources block is still supported, but the proper way to organize the yaml file for user privileges is changed, and looks like this:
rbac:
  policies:
    - id: 'data_upload'
      description: 'upload raw data files to S3'
      role_ids: ['file_uploader']
      resource_paths: ['/data_file']
  resources:
    - name: 'data_file'
    - name: 'programs'
      subresources:
      - name: 'test'
        subresources:
        - name: 'projects'
          subresources:
          - name: 'test'
      - name: 'test_program'
  roles:
    - id: 'file_uploader'
      description: 'can upload data files'
      permissions:
        - id: 'file_upload'
          action:
            service: 'fence'
            method: 'file_upload'

To grant users access for uploading data files, they need the corresponding data_upload policy added:

users:
  example_user@domain.com:
    policies: ['data_upload']