Extract schema.polar file

kamu-data · Jan 8, 2024 · 1f10c31 · 1f10c31
1 parent d66c0c8
commit 1f10c31
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 26 deletions.
diff --git a/src/adapter/auth-oso/src/kamu_auth_oso.rs b/src/adapter/auth-oso/src/kamu_auth_oso.rs
@@ -40,32 +40,7 @@ impl KamuAuthOso {
         oso.register_class(DatasetResource::get_polar_class())?;
         oso.register_class(UserActor::get_polar_class())?;
 
-        oso.load_str(
-            r#"
-            actor UserActor {}
-
-            resource DatasetResource {
-                permissions = ["read", "write"];
-            }
-
-            has_permission(actor: UserActor, "read", dataset: DatasetResource) if
-                dataset.allows_public_read or
-                dataset.created_by == actor.name or (
-                    actor_name = actor.name and
-                    dataset.authorized_users.(actor_name) in ["Reader", "Editor"]
-                );
-
-            has_permission(actor: UserActor, "write", dataset: DatasetResource) if
-                dataset.created_by == actor.name or (
-                    actor_name = actor.name and
-                    dataset.authorized_users.(actor_name) == "Editor"
-                );
-
-            allow(actor: UserActor, action: String, dataset: DatasetResource) if
-                actor.is_admin or
-                has_permission(actor, action, dataset);
-        "#,
-        )?;
+        oso.load_str(include_str!("schema.polar"))?;
 
         Ok(oso)
     }

diff --git a/src/adapter/auth-oso/src/schema.polar b/src/adapter/auth-oso/src/schema.polar
@@ -0,0 +1,22 @@
+actor UserActor {}
+
+resource DatasetResource {
+    permissions = ["read", "write"];
+}
+
+has_permission(actor: UserActor, "read", dataset: DatasetResource) if
+    dataset.allows_public_read or
+    dataset.created_by == actor.name or (
+        actor_name = actor.name and
+        dataset.authorized_users.(actor_name) in ["Reader", "Editor"]
+    );
+
+has_permission(actor: UserActor, "write", dataset: DatasetResource) if
+    dataset.created_by == actor.name or (
+        actor_name = actor.name and
+        dataset.authorized_users.(actor_name) == "Editor"
+    );
+
+allow(actor: UserActor, action: String, dataset: DatasetResource) if
+    actor.is_admin or
+    has_permission(actor, action, dataset);