Pages

.github/workflows/ci.yml

@@ -9,7 +9,15 @@ on:
 
 jobs:
 
-  build:
+  Policies:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Test Policies
+      run: ./run-policy-tests.sh
+
+  CLI:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4

.gitignore

@@ -15,7 +15,6 @@ bin/
 
 # Project-specific output
 dist/
-modelsource
 tmp/
 !tmp/.gitkeep
 

lint/lint_test.go

@@ -6,17 +6,17 @@ import (
 
 // TestAdd tests the Add function to ensure it returns correct results.
 func TestLintSingle(t *testing.T) {
-	t.Run("single policy skipped", func(t *testing.T) {
-		result, err := evalTestsuite("./../policies/001_project_settings/001_0004_strong_password.rego", "./../modelsource")
+	// t.Run("single policy skipped", func(t *testing.T) {
+	// 	result, err := evalTestsuite("./../policies/001_project_settings/001_0004_strong_password.rego", "./../modelsource")
 
-		if err != nil {
-			t.Errorf("Failed to evaluate")
-		}
+	// 	if err != nil {
+	// 		t.Errorf("Failed to evaluate")
+	// 	}
 
-		if result.Skipped != 1 {
-			t.Errorf("Policy not skipped")
-		}
-	})
+	// 	if result.Skipped != 1 {
+	// 		t.Errorf("Policy not skipped")
+	// 	}
+	// })
 	t.Run("single policy passes", func(t *testing.T) {
 		result, err := evalTestsuite("./../policies/001_project_settings/001_0003_security_checks.rego", "./../modelsource")
 
@@ -35,7 +35,7 @@ func TestLintBundle(t *testing.T) {
 		err := EvalAll("./../policies", "./../modelsource", "")
 
 		if err != nil {
-			t.Errorf("Failed to evaluate: %v", err)
+			t.Errorf("No failures expected: %v", err)
 		}
 	})
 }

modelsource/Atlas_Web_Content/DomainModels$DomainModel.yaml

@@ -5,7 +5,33 @@ CrossAssociations: null
 Documentation: ""
 Entities:
 - $Type: DomainModels$EntityImpl
-  AccessRules: null
+  AccessRules:
+  - $Type: DomainModels$AccessRule
+    AllowCreate: false
+    AllowDelete: false
+    AllowedModuleRoles:
+    - Atlas_Web_Content.UserRole
+    DefaultMemberAccessRights: None
+    Documentation: ""
+    MemberAccesses:
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: Atlas_Web_Content.LoginContext.Username
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: Atlas_Web_Content.LoginContext.Password
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: Atlas_Web_Content.LoginContext.RememberMe
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: Atlas_Web_Content.LoginContext.ValidationMessage
+    XPathConstraint: ""
+    XPathConstraintCaption: ""
   Attributes:
   - $Type: DomainModels$Attribute
     Documentation: ""

modelsource/MyFirstModule/DomainModels$DomainModel.yaml

@@ -9,28 +9,53 @@ Annotations:
   ExportLevel: Hidden
   Width: 440
 Associations: null
-CrossAssociations:
-- $Type: DomainModels$CrossAssociation
-  Child: System.User
-  DeleteBehavior:
-    $Type: DomainModels$DeleteBehavior
-    ChildDeleteBehavior: DeleteMeButKeepReferences
-    ChildErrorMessage: null
-    ParentDeleteBehavior: DeleteMeButKeepReferences
-    ParentErrorMessage: null
-  Documentation: ""
-  ExportLevel: Hidden
-  Name: Bike_User
-  Owner: Default
-  ParentPointer:
-    Data: gHs+zUMPEkqt8W+kjKXWew==
-    Subtype: 0
-  Source: null
-  Type: Reference
+CrossAssociations: null
 Documentation: ""
 Entities:
 - $Type: DomainModels$EntityImpl
-  AccessRules: null
+  AccessRules:
+  - $Type: DomainModels$AccessRule
+    AllowCreate: false
+    AllowDelete: false
+    AllowedModuleRoles:
+    - MyFirstModule.User
+    DefaultMemberAccessRights: ReadOnly
+    Documentation: ""
+    MemberAccesses:
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: System.Image.PublicThumbnailPath
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: System.Image.EnableCaching
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: System.FileDocument.FileID
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: System.FileDocument.Name
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: System.FileDocument.DeleteAfterDownload
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: System.FileDocument.Contents
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: System.FileDocument.HasContents
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: System.FileDocument.Size
+    XPathConstraint: ""
+    XPathConstraintCaption: ""
   Attributes: null
   Documentation: ""
   Events: null
@@ -43,7 +68,25 @@ Entities:
   Source: null
   ValidationRules: null
 - $Type: DomainModels$EntityImpl
-  AccessRules: null
+  AccessRules:
+  - $Type: DomainModels$AccessRule
+    AllowCreate: false
+    AllowDelete: false
+    AllowedModuleRoles:
+    - MyFirstModule.User
+    DefaultMemberAccessRights: ReadOnly
+    Documentation: ""
+    MemberAccesses:
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: MyFirstModule.Bike.Name
+    - $Type: DomainModels$MemberAccess
+      AccessRights: ReadOnly
+      Association: ""
+      Attribute: MyFirstModule.Bike.PurchaseDate
+    XPathConstraint: ""
+    XPathConstraintCaption: ""
   Attributes:
   - $Type: DomainModels$Attribute
     Documentation: ""