authorization/src/test/resources/atlas-simple-authz-policy.json

{
  "roles": {
    "ROLE_ADMIN": {
      "adminPermissions": [
        {
          "privileges": [ ".*" ]
        }
      ],

      "entityPermissions": [
        {
          "privileges":            [ ".*" ],
          "entityTypes":           [ ".*" ],
          "entityIds":             [ ".*" ],
          "classifications":       [ ".*" ],
          "entityClassifications": [ ".*" ]
        }
      ],

      "typePermissions": [
        {
          "privileges":     [ ".*" ],
          "typeCategories": [ ".*" ],
          "typeNames":      [ ".*" ]
        }
      ],
      "relationshipPermissions": [
        {
          "privileges":                 [ ".*" ],
          "relationshipTypes":          [ ".*" ],
          "endOneEntityType":           [ ".*" ],
          "endOneEntityId":             [ ".*" ],
          "endOneEntityClassification": [ ".*" ],
          "endTwoEntityType":           [ ".*" ],
          "endTwoEntityId":             [ ".*" ],
          "endTwoEntityClassification": [ ".*" ]
        }
      ]
    },

    "DATA_SCIENTIST": {
      "entityPermissions": [
        {
          "privileges":       [ "entity-read", "entity-read-classification" ],
          "entityTypes":      [ ".*" ],
          "entityIds":        [ ".*" ],
          "classifications":  [ ".*" ],
          "labels":           [ ".*" ],
          "businessMetadata": [ ".*" ]
        }
      ]
    },

    "DATA_STEWARD": {
      "entityPermissions": [
        {
          "privileges":            [ "entity-read", "entity-create", "entity-update", "entity-read-classification", "entity-add-classification", "entity-update-classification", "entity-remove-classification", "entity-add-label", "entity-remove-label", "entity-update-business-metadata" ],
          "entityTypes":           [ ".*" ],
          "entityIds":             [ ".*" ],
          "entityClassifications": [ ".*" ],
          "labels":                [ ".*" ],
          "businessMetadata":      [ ".*" ],
          "attributes":            [ ".*" ],
          "classifications":       [ ".*" ]
        }
      ]
    },

    "FINANCE": {
      "entityPermissions": [
        {
          "privileges":            [ "entity-read", "entity-create", "entity-update", "entity-read-classification", "entity-add-label", "entity-remove-label", "entity-update-business-metadata" ],
          "entityTypes":           [ ".*" ],
          "entityIds":             [ ".*" ],
          "entityClassifications": [ "FINANCE" ],
          "labels":                [ ".*" ],
          "businessMetadata":      [ ".*" ],
          "attributes":            [ ".*" ]
        },
        {
          "privileges":            [ "entity-add-classification", "entity-update-classification", "entity-remove-classification" ],
          "entityTypes":           [ ".*" ],
          "entityIds":             [ ".*" ],
          "entityClassifications": [ "FINANCE" ],
          "labels":                [ ".*" ],
          "businessMetadata":      [ ".*" ],
          "attributes":            [ ".*" ],
          "classifications":       [ "FINANCE" ]
        }
      ]
    },

    "FINANCE_PII": {
      "entityPermissions": [
        {
          "privileges":            [ "entity-read", "entity-create", "entity-update", "entity-read-classification", "entity-add-label", "entity-remove-label", "entity-update-business-metadata" ],
          "entityTypes":           [ ".*" ],
          "entityIds":             [ ".*" ],
          "entityClassifications": [ "FINANCE", "PII" ],
          "labels":                [ ".*" ],
          "businessMetadata":      [ ".*" ],
          "attributes":            [ ".*" ]
        },
        {
          "privileges":            [ "entity-add-classification", "entity-update-classification", "entity-remove-classification" ],
          "entityTypes":           [ ".*" ],
          "entityIds":             [ ".*" ],
          "entityClassifications": [ "FINANCE", "PII" ],
          "labels":                [ ".*" ],
          "businessMetadata":      [ ".*" ],
          "attributes":            [ ".*" ],
          "classifications":       [ "FINANCE", "PII" ]
        }
      ]
    },

    "DATA_STEWARD_EX": {
      "entityPermissions": [
        {
          "privileges":            [ "entity-read", "entity-create", "entity-update", "entity-read-classification", "entity-add-classification", "entity-update-classification", "entity-remove-classification", "entity-add-label", "entity-remove-label", "entity-update-business-metadata" ],
          "entityTypes":           [ ".*" ],
          "entityIds":             [ ".*" ],
          "entityClassifications": [ "PII.*" ],
          "labels":                [ ".*" ],
          "businessMetadata":      [ ".*" ],
          "attributes":            [ ".*" ],
          "classifications":       [ "PII.*" ]
        }
      ]
    }
  },

  "userRoles": {
    "admin":          [ "ROLE_ADMIN" ],
    "rangertagsync":  [ "DATA_SCIENTIST" ],
    "dataScientist1": [ "DATA_SCIENTIST"],
    "dataSteward1":   [ "DATA_STEWARD"]
  },

  "groupRoles": {
    "ROLE_ADMIN":      [ "ROLE_ADMIN" ],
    "hadoop":          [ "DATA_STEWARD" ],
    "DATA_STEWARD":    [ "DATA_STEWARD" ],
    "RANGER_TAG_SYNC": [ "DATA_SCIENTIST" ],
    "FINANCE":         [ "FINANCE" ],
    "FINANCE_PII":     [ "FINANCE_PII" ],
    "RANGER_TAG_SYNC": [ "DATA_SCIENTIST" ],
    "DATA_STEWARD_EX": [ "DATA_STEWARD_EX" ]
  }
}