Allow operations on invoices for users with manage_invoices

Author: rschev

src/main/resources/rego/policy.rego

@@ -34,45 +34,47 @@ default can_update_supplier := false
 
 default can_delete_supplier := false
 
-# Policy zsn6mlr6y4tq
-# - input.entity is type 'supplier'
-can_read_supplier {
+# Policy 6z4vihwwdvdq
+# - input.entity is type 'invoice'
+can_read_invoice {
 	input.auth.authenticated == true
 	input.auth.principal.kind == "user"
-	input.auth.principal["contentgrid:admin"] == true
+	input.auth.principal["contentgrid:manage_invoices"] == true
 }
-can_create_supplier {
+can_create_invoice {
 	input.auth.authenticated == true
 	input.auth.principal.kind == "user"
-	input.auth.principal["contentgrid:admin"] == true
+	input.auth.principal["contentgrid:manage_invoices"] == true
 }
-can_update_supplier {
+can_update_invoice {
 	input.auth.authenticated == true
 	input.auth.principal.kind == "user"
-	input.auth.principal["contentgrid:admin"] == true
+	input.auth.principal["contentgrid:manage_invoices"] == true
 }
-can_delete_supplier {
+can_delete_invoice {
 	input.auth.authenticated == true
 	input.auth.principal.kind == "user"
-	input.auth.principal["contentgrid:admin"] == true
+	input.auth.principal["contentgrid:manage_invoices"] == true
 }
-# - input.entity is type 'invoice'
-can_read_invoice {
+# End policy 6z4vihwwdvdq
+# Policy zsn6mlr6y4tq
+# - input.entity is type 'supplier'
+can_read_supplier {
 	input.auth.authenticated == true
 	input.auth.principal.kind == "user"
 	input.auth.principal["contentgrid:admin"] == true
 }
-can_create_invoice {
+can_create_supplier {
 	input.auth.authenticated == true
 	input.auth.principal.kind == "user"
 	input.auth.principal["contentgrid:admin"] == true
 }
-can_update_invoice {
+can_update_supplier {
 	input.auth.authenticated == true
 	input.auth.principal.kind == "user"
 	input.auth.principal["contentgrid:admin"] == true
 }
-can_delete_invoice {
+can_delete_supplier {
 	input.auth.authenticated == true
 	input.auth.principal.kind == "user"
 	input.auth.principal["contentgrid:admin"] == true