grant access to payments_rides for non-agency users (#1714)

* grant access to payments_rides for non-agency users * just use calitp domain and add a couple other users
cal-itp · Aug 29, 2022 · 062321b · 062321b
1 parent 6817264
commit 062321b
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 2 deletions.
diff --git a/warehouse/macros/create_row_access_policy.sql b/warehouse/macros/create_row_access_policy.sql
@@ -10,6 +10,10 @@ grant to (
   {% endfor %}
 )
 filter using (
+  {% if not filter_column and not filter_value %}
+  1 = 1
+  {% else %}
   {{ filter_column }} = '{{ filter_value }}'
+  {% endif %}
 )
 {% endmacro %}
diff --git a/warehouse/models/payments_views/payments_rides.sql b/warehouse/models/payments_views/payments_rides.sql
@@ -1,5 +1,6 @@
 {{ config(
-    post_hook=[" {{ create_row_access_policy(
+    post_hook=[
+" {{ create_row_access_policy(
     filter_column = 'participant_id',
     filter_value = 'mst',
     principals = ['serviceAccount:[email protected]']
@@ -18,7 +19,16 @@
     filter_column = 'participant_id',
     filter_value = 'clean-air-express',
     principals = ['serviceAccount:clean-air-payments-user@cal-itp-data-infra.iam.gserviceaccount.com']
-) }}"
+) }}",
+" {{ create_row_access_policy(
+    principals = ['serviceAccount:[email protected]',
+                  'group:[email protected]',
+                  'domain:calitp.org',
+                  'user:[email protected]',
+                  'user:[email protected]',
+                  'user:[email protected]',
+                 ]
+) }}",
 ]
 
 ) }}