Move access policies to separated seed

beda-software · Sep 4, 2023 · d74ffa2 · d74ffa2
1 parent 62d487f
commit d74ffa2
Showing 1 changed file with 24 additions and 19 deletions.
diff --git a/zenproject/zrc/system.edn b/zenproject/zrc/system.edn
@@ -12,6 +12,7 @@
   :zen/desc "Beda EMR"
   :services {:seed seed
              :seed-fixtures seed-fixtures
+             :seed-fixtrures-policy access-policies
              :repositories repositories}}
 
  seed
@@ -35,25 +36,7 @@
                         :secret "secret"}
             :patient-questionnaire {:grant_types [:basic]
                                     :secret "secret"}}
-   :AccessPolicy {:test-wildcard-policy {:engine "allow" :link [{:resourceType "User"}]}
-                  :admin-policy {:engine "allow"
-                                 :roleName "admin"}
-                  :patient-role-policy {:engine "allow"
-                                        :roleName "patient"}
-                  :public-appointment-policy
-                  {:engine "allow"
-                   :link [{:resourceType "Client" :id "anonymous"}]}
-                  :patient-questionnaire-policy
-                  {:engine "allow"
-                   :link [{:resourceType "Client" :id "patient-questionnaire"}]}
-                  :federated-identity-signin {:engine "json-schema"
-                                              :schema {:required ["jwt"]
-                                                       :properties {:jwt {:required ["iss", "aud", "sub"]
-                                                                          :properties {:iss {:const "https://appleid.apple.com"}
-                                                                                       :aud {:enum ["software.beda.emr", "software.beda.fhirmhealth.fhirmhealth"]}
-                                                                                       :sub {:type "string"
-                                                                                             :minLength 1}}}}}}}
-   :Practitioner {:admin {:name [{:given ["Alex"], :family "Admin"}]}
+  :Practitioner {:admin {:name [{:given ["Alex"], :family "Admin"}]}
                   :practitioner {:name [{:given ["John"], :family "Practitioner"}]}}
    :User {:practitioner {:password "password" :fhirUser {:id "practitioner" :resourceType "Practitioner"}}}
    :Role {:admin {:name "admin"
@@ -87,6 +70,28 @@
                               :resource {:resourceType "Entity" :id "Mapping"}
                               :enum ["JUTE", "FHIRPath"]}}}}
 
+ access-policies
+ {:zen/tags  #{aidbox/service}
+  :engine    aidbox/seed-v2
+  :resources {:AccessPolicy {:test-wildcard-policy {:engine "allow" :link [{:resourceType "User"}]}
+                             :admin-policy {:engine "allow"
+                                            :roleName "admin"}
+                             :patient-role-policy {:engine "allow"
+                                                   :roleName "patient"}
+                             :public-appointment-policy
+                             {:engine "allow"
+                              :link [{:resourceType "Client" :id "anonymous"}]}
+                             :patient-questionnaire-policy
+                             {:engine "allow"
+                              :link [{:resourceType "Client" :id "patient-questionnaire"}]}
+                             :federated-identity-signin {:engine "json-schema"
+                                                         :schema {:required ["jwt"]
+                                                                  :properties {:jwt {:required ["iss", "aud", "sub"]
+                                                                                     :properties {:iss {:const "https://appleid.apple.com"}
+                                                                                                  :aud {:enum ["software.beda.emr", "software.beda.fhirmhealth.fhirmhealth"]}
+                                                                                                  :sub {:type "string"
+                                                                                                        :minLength 1}}}}}}}}}
+
  encounter-participant-display
  {:zen/tags #{aidbox.search-parameter.v1/search-parameter}
   :name "participant-display"