py-ailbl-user-profile/.fission/access-rules.yaml

- id: 'ailbl-tag-create'
  description: 'This description'
  upstream:
    preserve_host: true
    url: 'http://router.fission.svc.cluster.local:80'
    strip_path: 'v1/'
  match:
    url: 'https://api.geohub.vn/v1/ailbl/admin/tags'
    methods:
    - POST
  authenticators:
  - handler: cookie_session
  authorizer:
    handler: remote_json
    config:
      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
      payload: >-
        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::create","relation":"access"}
  mutators:
  - handler: header

- id: 'ailbl-tag-view'
  description: 'This description'
  upstream:
    preserve_host: true
    url: 'http://router.fission.svc.cluster.local:80'
    strip_path: 'v1/'
  match:
    url: 'https://api.geohub.vn/v1/ailbl/admin/tags'
    methods:
    - GET
  authenticators:
  - handler: cookie_session
  authorizer:
    handler: remote_json
    config:
      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
      payload: >-
        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::view","relation":"access"}
  mutators:
  - handler: header

- id: 'ailbl-tag-update'
  description: 'This description'
  upstream:
    preserve_host: true
    url: 'http://router.fission.svc.cluster.local:80'
    strip_path: 'v1/'
  match:
    url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>'
    methods:
    - PUT
  authenticators:
  - handler: cookie_session
  authorizer:
    handler: remote_json
    config:
      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
      payload: >-
        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::update","relation":"access"}
  mutators:
  - handler: header

- id: 'ailbl-tag-delete'
  description: 'This description'
  upstream:
    preserve_host: true
    url: 'http://router.fission.svc.cluster.local:80'
    strip_path: 'v1/'
  match:
    url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>'
    methods:
    - DELETE
  authenticators:
  - handler: cookie_session
  authorizer:
    handler: remote_json
    config:
      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
      payload: >-
        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::delete","relation":"access"}
  mutators:
  - handler: header

- id: 'ailbl-tag-ref-create'
  description: 'This description'
  upstream:
    preserve_host: true
    url: 'http://router.fission.svc.cluster.local:80'
    strip_path: 'v1/'
  match:
    url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>/refs'
    methods:
    - POST
  authenticators:
  - handler: cookie_session
  authorizer:
    handler: remote_json
    config:
      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
      payload: >-
        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::create","relation":"access"}
  mutators:
  - handler: header

- id: 'ailbl-tag-ref-view'
  description: 'This description'
  upstream:
    preserve_host: true
    url: 'http://router.fission.svc.cluster.local:80'
    strip_path: 'v1/'
  match:
    url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>/refs'
    methods:
    - GET
  authenticators:
  - handler: cookie_session
  authorizer:
    handler: remote_json
    config:
      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
      payload: >-
        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::view","relation":"access"}
  mutators:
  - handler: header

- id: 'ailbl-tag-ref-delete'
  description: 'This description'
  upstream:
    preserve_host: true
    url: 'http://router.fission.svc.cluster.local:80'
    strip_path: 'v1/'
  match:
    url: 'https://api.geohub.vn/v1/ailbl/admin/tags/<[0-9a-fA-F\-]{36}>/refs/<[0-9a-fA-F\-]{36}>'
    methods:
    - DELETE
  authenticators:
  - handler: cookie_session
  authorizer:
    handler: remote_json
    config:
      remote: 'http://keto-service.ory-staging.svc.cluster.local:4466/relation-tuples/check'
      payload: >-
        {"namespace":"AilblAcp","subject_id":"{{print .Subject}}","object":"acp::ailbl::tag::ref::delete","relation":"access"}
  mutators:
  - handler: header