feat(lib): Load abac config from policy service

dmihalcik-virtru commented 2 months ago

New parameters for tdf/client:
New arguments to cli encrypt
- encrypt --autoconfigure enables attribute lookup during encrypt and corresponding updates to the KAO
- --policyEndpoint allows KAS and policy service to be hosted separately. if not set, it is inferred by removing /kas off of the end of the --kasEndpoint argument.
New cli command, attrs, which prints out the JSON hydrated version of the attributes from the policy service
I've broken out the ABAC configuration logic into a separate PR, https://github.com/opentdf/client-web/pull/349, to simplify review. This PR is focused on the policy service and CLI additions

sonarcloud[bot] commented 2 months ago

Quality Gate failed

Failed conditions
31.4% Coverage on New Code (required ≥ 80%)

pflynn-virtru commented 2 months ago

Does this policy endpoint require admin privileges?

dmihalcik-virtru commented 2 months ago

Does this policy endpoint require admin privileges?

In the default casbin it is marked as 'read' for standard access, but not available for public (unauthenticated) clients