diff --git a/kubernetes/opa/analytics/policies.rego b/kubernetes/opa/analytics/policies.rego index a76d5d03ac..b590c6e3e8 100644 --- a/kubernetes/opa/analytics/policies.rego +++ b/kubernetes/opa/analytics/policies.rego @@ -57,7 +57,7 @@ submitDataExhaustRequest { roles :=["PROGRAM_MANAGER", "PROGRAM_DESIGNER"] super.acls_check(acls) super.role_check(roles) - input.parsed_body.request.dataset in ["druid-dataset"] + input.parsed_body.request.dataset in ["druid-dataset","program-user-exhaust"] x_channel_id x_authenticated_userid == super.userid } @@ -65,4 +65,4 @@ submitDataExhaustRequest { submitDataExhaustRequest { not x_authenticated_user_token not x_authenticated_userid -} \ No newline at end of file +}