fix(policy): grant Trigger to IngestionBot for /trigger authz

Author: manerow

bootstrap/sql/migrations/native/1.12.9/mysql/postDataMigrationSQLScript.sql

@@ -0,0 +1 @@
+-- Placeholder for 1.12.9 MySQL

bootstrap/sql/migrations/native/1.12.9/mysql/schemaChanges.sql

@@ -0,0 +1 @@
+-- Placeholder for 1.12.9 MySQL

bootstrap/sql/migrations/native/1.12.9/postgres/postDataMigrationSQLScript.sql

@@ -0,0 +1 @@
+-- Placeholder for 1.12.9 Postgres

bootstrap/sql/migrations/native/1.12.9/postgres/schemaChanges.sql

@@ -0,0 +1 @@
+-- Placeholder for 1.12.9 Postgres

openmetadata-service/src/main/java/org/openmetadata/service/migration/mysql/v1129/Migration.java

@@ -0,0 +1,20 @@
+package org.openmetadata.service.migration.mysql.v1129;
+
+import static org.openmetadata.service.migration.utils.v1129.MigrationUtil.addTriggerOperationToIngestionBotPolicy;
+
+import lombok.SneakyThrows;
+import org.openmetadata.service.migration.api.MigrationProcessImpl;
+import org.openmetadata.service.migration.utils.MigrationFile;
+
+public class Migration extends MigrationProcessImpl {
+
+  public Migration(MigrationFile migrationFile) {
+    super(migrationFile);
+  }
+
+  @Override
+  @SneakyThrows
+  public void runDataMigration() {
+    addTriggerOperationToIngestionBotPolicy(collectionDAO);
+  }
+}

openmetadata-service/src/main/java/org/openmetadata/service/migration/mysql/v1130/Migration.java

@@ -1,5 +1,7 @@
 package org.openmetadata.service.migration.mysql.v1130;
 
+import static org.openmetadata.service.migration.utils.v1129.MigrationUtil.addTriggerOperationToIngestionBotPolicy;
+
 import lombok.SneakyThrows;
 import lombok.extern.slf4j.Slf4j;
 import org.openmetadata.service.migration.api.MigrationProcessImpl;
@@ -31,5 +33,6 @@ public void runDataMigration() {
       LOG.error("v1130 glossaryTerm version relatedTerms transform failed; re-run to retry.", e);
     }
     MigrationUtil.addTableColumnSearchSettings();
+    addTriggerOperationToIngestionBotPolicy(collectionDAO);
   }
 }

openmetadata-service/src/main/java/org/openmetadata/service/migration/postgres/v1129/Migration.java

@@ -0,0 +1,20 @@
+package org.openmetadata.service.migration.postgres.v1129;
+
+import static org.openmetadata.service.migration.utils.v1129.MigrationUtil.addTriggerOperationToIngestionBotPolicy;
+
+import lombok.SneakyThrows;
+import org.openmetadata.service.migration.api.MigrationProcessImpl;
+import org.openmetadata.service.migration.utils.MigrationFile;
+
+public class Migration extends MigrationProcessImpl {
+
+  public Migration(MigrationFile migrationFile) {
+    super(migrationFile);
+  }
+
+  @Override
+  @SneakyThrows
+  public void runDataMigration() {
+    addTriggerOperationToIngestionBotPolicy(collectionDAO);
+  }
+}

openmetadata-service/src/main/java/org/openmetadata/service/migration/postgres/v1130/Migration.java

@@ -1,5 +1,7 @@
 package org.openmetadata.service.migration.postgres.v1130;
 
+import static org.openmetadata.service.migration.utils.v1129.MigrationUtil.addTriggerOperationToIngestionBotPolicy;
+
 import lombok.SneakyThrows;
 import lombok.extern.slf4j.Slf4j;
 import org.openmetadata.service.migration.api.MigrationProcessImpl;
@@ -31,5 +33,6 @@ public void runDataMigration() {
       LOG.error("v1130 glossaryTerm version relatedTerms transform failed; re-run to retry.", e);
     }
     MigrationUtil.addTableColumnSearchSettings();
+    addTriggerOperationToIngestionBotPolicy(collectionDAO);
   }
 }

openmetadata-service/src/main/java/org/openmetadata/service/migration/utils/v1129/MigrationUtil.java

@@ -0,0 +1,22 @@
+package org.openmetadata.service.migration.utils.v1129;
+
+import static org.openmetadata.service.migration.utils.v160.MigrationUtil.addOperationsToPolicyRule;
+
+import java.util.List;
+import lombok.extern.slf4j.Slf4j;
+import org.openmetadata.schema.type.MetadataOperation;
+import org.openmetadata.service.jdbi3.CollectionDAO;
+
+@Slf4j
+public class MigrationUtil {
+
+  private MigrationUtil() {}
+
+  public static void addTriggerOperationToIngestionBotPolicy(CollectionDAO collectionDAO) {
+    addOperationsToPolicyRule(
+        "IngestionBotPolicy",
+        "IngestionBotRule-Allow",
+        List.of(MetadataOperation.TRIGGER),
+        collectionDAO);
+  }
+}

openmetadata-service/src/main/resources/json/data/policy/IngestionBotPolicy.json

@@ -11,7 +11,7 @@
       "name": "IngestionBotRule-Allow",
       "description" : "Allow ingestion bots to create/update/delete data entities",
       "resources" : ["All"],
-      "operations": ["Create", "BulkCreate", "BulkUpdate", "EditAll", "ViewAll", "Delete"],
+      "operations": ["Create", "BulkCreate", "BulkUpdate", "EditAll", "ViewAll", "Delete", "Trigger"],
       "effect": "allow"
     },
     {