Fix for OpenConext/OpenConext-manage#505

Author: oharsta

roles/manage/tasks/main.yml

@@ -9,6 +9,7 @@
   with_items:
     - "/opt/openconext/manage/metadata_configuration"
     - "/opt/openconext/manage/metadata_templates"
+    - "/opt/openconext/manage/policies"
 
 - name: Import the mongo CA file
   ansible.builtin.copy:
@@ -72,6 +73,19 @@
   notify:
     - "restart manageserver"
 
+- name: copy policies configuration
+  copy:
+    src: "policies/{{ item }}"
+    dest: "/opt/openconext/manage/policies/{{ item }}"
+    owner: root
+    group: root
+    mode: "0640"
+  with_items:
+    - allowed_attributes.json
+    - extra_saml_attributes.json
+  notify:
+    - "restart manageserver"
+
 - name: Add the mongodb and mariadb  docker network to the list of networks when MongoDB runs in Docker
   ansible.builtin.set_fact:
     manage_docker_networks:

roles/manage/templates/application.yml.j2

@@ -68,12 +68,17 @@ security:
   api_users_config_path: file://{{ manage_dir }}/manage-api-users.yml
   super_user_attribute_name: {{ manage_super_user_attribute_name }}
   super_user_values: {{ manage.super_user_team_names }}
- 
+
 crypto:
   development-mode: False
   public-key-location: file://{{ manage_dir }}/public_invite_key.pem
   enabled: {{ manage.crypto_enabled }}
 
+# Can also be a file system resource like file://{{ manage_dir }}/policies/allowed_attributes.json
+policies:
+  allowed_attributes: file://{{ manage_dir }}/policies/allowed_attributes.json
+  extra_saml_attributes: file://{{ manage_dir }}/policies/extra_saml_attributes.json
+
 spring:
   mail:
     host: {{ smtp_server }}