add ad policies

opa/ad/delete.rego

@@ -0,0 +1,11 @@
+package AD.DELETE
+
+default allow := false
+
+allow {
+	input.userUuid == input.owner
+}
+
+allow {
+	input.role == "admin"
+}

opa/ad/list.rego

@@ -0,0 +1,3 @@
+package AD.LIST
+
+default allow := true

opa/ad/read.rego

@@ -0,0 +1,11 @@
+package AD.READ
+
+default allow := false
+
+allow {
+    input.userUuid == input.owner
+}
+
+allow {
+    input.role == "admin"
+}

opa/ad/update.rego

@@ -0,0 +1,11 @@
+package AD.UPDATE
+
+default allow := false
+
+allow {
+	input.userUuid == input.owner
+}
+
+allow {
+	input.role == "admin"
+}

opa/user/read.rego

@@ -2,10 +2,10 @@ package USER.READ
 
 default allow := false
 
-allow := true {
+allow {
     input.uuid == input.owner
 }
 
-allow := true {
+allow {
     input.role == "admin"
 }