[INVESTIGATION] Policy behaviour about odd-platform HOT 1 CLOSED

policy binded to role using public.role_to_policy table

user binded to owner using public.user_owner_mapping;

Role should be binded with policy using public.role_to_policy

User binded to role through owner using public.owner_to_role.
In case, user doesn't binded to role, ODD will try to use default role by authority ADMIN or USER
In case, ODD cannot specify default role and user doesn't binded to role, list of policies will be empty.

If you want to edit or create new PermissionResourceType
1.You need to update Administrator(and other policies if needed) and add your new resource
2.add new resource to PolicyTypeDto, AuthorizationManagerType, PolicyConditionKeyDto and PermissionResourceType
3.Create PermissionExtractor by extending AbstractContextualPermissionExtractor
4.Create {ResoruceName}PolicyResolverContext which will be used to validate policies and ownership(if needed).
5.add new method extract{ResourceName}Permissions to PolicyPermissionExtractor
6.Create ConditionResolver by extending AbstractConditionResolver

API's:

1. api/identity/whoami - returns MANAGEMENT permissions for role.
2. api/resource/{PermissionResourceType}/{resource_id}/permissions - returns specific polices by PermissionResourceType for role.

from odd-platform.