roc-umbrella: add 2.1.x model
Change-Id: I4ddea2006f91cce6da3cc09ed81301f211708da7
diff --git a/aether-roc-umbrella/files/opa-rbac/aether-2.1.0.rego b/aether-roc-umbrella/files/opa-rbac/aether-2.1.0.rego
new file mode 100644
index 0000000..d764f4a
--- /dev/null
+++ b/aether-roc-umbrella/files/opa-rbac/aether-2.1.0.rego
@@ -0,0 +1,31 @@
+# SPDX-FileCopyrightText: 2022-present Open Networking Foundation <info@opennetworking.org>
+#
+# SPDX-License-Identifier: Apache-2.0
+
+package aether_2_1_x
+
+echo[config] {
+ config := input
+}
+
+allowed[config] {
+ enterprise := enterprise_rule
+ config := {
+ "connectivity_services": object.get(input, "connectivity_services", {}),
+ "enterprises": {
+ "enterprise": [
+ enterprise
+ ]
+ }
+ }
+}
+
+enterprise_rule[enterprise] {
+ enterprise := input.enterprises.enterprise[_]
+ ["AetherROCAdmin", enterprise.enterprise_id][_] == input.groups[i]
+}
+
+can_update_enterprise = true {
+ update_enterprise := input.updates.enterprises.enterprise[_]
+ ["AetherROCAdmin", update_enterprise.enterprise_id][_] == input.groups[i]
+}