🛂 Update Analytical and Data Platform permissions model (#5287)

Signed-off-by: Jacob Woffenden <jacob.woffenden@digital.justice.gov.uk>
ministryofjustice · Nov 21, 2023 · 1f9905d · 1f9905d
1 parent d527a4f
commit 1f9905d
Show file tree

Hide file tree

Showing 8 changed files with 56 additions and 117 deletions.
diff --git a/environments/analytical-platform-data-engineering.json b/environments/analytical-platform-data-engineering.json
@@ -5,45 +5,41 @@
       "name": "production",
       "access": [
         {
-          "github_slug": "analytical-platform",
+          "github_slug": "analytical-platform-data-engineering-production-administrator",
           "level": "administrator"
         },
         {
-          "github_slug": "analytics-hq",
-          "level": "view-only"
-        },
-        {
-          "github_slug": "data-engineering-aws",
+          "github_slug": "analytical-platform-data-engineering-production-data-engineer",
           "level": "data-engineer"
         },
         {
-          "github_slug": "data-engineering-aws-developers",
+          "github_slug": "analytical-platform-data-engineering-production-developer",
           "level": "developer"
+        },
+        {
+          "github_slug": "data-platform-audit-and-security",
+          "level": "security-audit"
         }
       ]
     },
     {
       "name": "sandboxa",
       "access": [
         {
-          "github_slug": "analytical-platform",
+          "github_slug": "analytical-platform-data-engineering-sandboxa-administrator",
           "level": "administrator"
         },
         {
-          "github_slug": "analytics-hq",
-          "level": "view-only"
+          "github_slug": "analytical-platform-data-engineering-sandboxa-data-engineer",
+          "level": "data-engineer"
         },
         {
-          "github_slug": "data-engineering",
-          "level": "administrator"
+          "github_slug": "analytical-platform-data-engineering-sandboxa-developer",
+          "level": "developer"
         },
         {
-          "github_slug": "data-platform-security-and-auditors",
+          "github_slug": "data-platform-audit-and-security",
           "level": "security-audit"
-        },
-        {
-          "github_slug": "data-platform-security-and-auditors",
-          "level": "read-only"
         }
       ]
     }

diff --git a/environments/analytical-platform-data.json b/environments/analytical-platform-data.json
@@ -5,37 +5,33 @@
       "name": "development",
       "access": [
         {
-          "github_slug": "analytical-platform",
+          "github_slug": "analytical-platform-data-development-administrator",
           "level": "administrator"
         },
         {
-          "github_slug": "analytics-hq",
-          "level": "view-only"
+          "github_slug": "analytical-platform-data-development-data-engineer",
+          "level": "data-engineer"
+        },
+        {
+          "github_slug": "data-platform-audit-and-security",
+          "level": "security-audit"
         }
       ]
     },
     {
       "name": "production",
       "access": [
         {
-          "github_slug": "analytical-platform",
+          "github_slug": "analytical-platform-data-production-administrator",
           "level": "administrator"
         },
         {
-          "github_slug": "analytics-hq",
-          "level": "view-only"
-        },
-        {
-          "github_slug": "data-engineering-aws",
+          "github_slug": "analytical-platform-data-production-data-engineer",
           "level": "data-engineer"
         },
         {
-          "github_slug": "data-platform-security-and-auditors",
+          "github_slug": "data-platform-audit-and-security",
           "level": "security-audit"
-        },
-        {
-          "github_slug": "data-platform-security-and-auditors",
-          "level": "read-only"
         }
       ]
     }

diff --git a/environments/analytical-platform-landing.json b/environments/analytical-platform-landing.json
@@ -5,20 +5,12 @@
       "name": "production",
       "access": [
         {
-          "github_slug": "analytical-platform",
+          "github_slug": "analytical-platform-landing-production-administrator",
           "level": "administrator"
         },
         {
-          "github_slug": "analytics-hq",
-          "level": "administrator"
-        },
-        {
-          "github_slug": "data-platform-security-and-auditors",
+          "github_slug": "data-platform-audit-and-security",
           "level": "security-audit"
-        },
-        {
-          "github_slug": "data-platform-security-and-auditors",
-          "level": "read-only"
         }
       ]
     }

diff --git a/environments/analytical-platform-management.json b/environments/analytical-platform-management.json
@@ -5,20 +5,12 @@
       "name": "production",
       "access": [
         {
-          "github_slug": "analytical-platform",
+          "github_slug": "analytical-platform-management-production-administrator",
           "level": "administrator"
         },
         {
-          "github_slug": "analytics-hq",
-          "level": "view-only"
-        },
-        {
-          "github_slug": "data-platform-security-and-auditors",
+          "github_slug": "data-platform-audit-and-security",
           "level": "security-audit"
-        },
-        {
-          "github_slug": "data-platform-security-and-auditors",
-          "level": "read-only"
         }
       ]
     }

diff --git a/environments/analytical-platform.json b/environments/analytical-platform.json
@@ -5,41 +5,25 @@
       "name": "development",
       "access": [
         {
-          "github_slug": "analytical-platform",
+          "github_slug": "analytical-platform-development-administrator",
           "level": "administrator"
         },
         {
-          "github_slug": "analytics-hq",
-          "level": "view-only"
-        },
-        {
-          "github_slug": "data-platform-security-and-auditors",
+          "github_slug": "data-platform-audit-and-security",
           "level": "security-audit"
-        },
-        {
-          "github_slug": "data-platform-security-and-auditors",
-          "level": "read-only"
         }
       ]
     },
     {
       "name": "production",
       "access": [
         {
-          "github_slug": "analytical-platform",
+          "github_slug": "analytical-platform-production-administrator",
           "level": "administrator"
         },
         {
-          "github_slug": "analytics-hq",
-          "level": "view-only"
-        },
-        {
-          "github_slug": "data-platform-security-and-auditors",
+          "github_slug": "data-platform-audit-and-security",
           "level": "security-audit"
-        },
-        {
-          "github_slug": "data-platform-security-and-auditors",
-          "level": "read-only"
         }
       ]
     }

diff --git a/environments/data-platform-apps-and-tools.json b/environments/data-platform-apps-and-tools.json
@@ -5,18 +5,18 @@
       "name": "development",
       "access": [
         {
-          "github_slug": "data-platform-core-infra",
+          "github_slug": "data-platform-apps-and-tools-development-sandbox",
           "level": "sandbox",
           "nuke": "exclude"
         },
         {
-          "github_slug": "data-tech-archs",
-          "level": "sandbox",
+          "github_slug": "data-platform-apps-and-tools-airflow-users",
+          "level": "mwaa-user",
           "nuke": "exclude"
         },
         {
-          "github_slug": "data-platform-apps-and-tools-airflow-users",
-          "level": "mwaa-user",
+          "github_slug": "data-platform-audit-and-security",
+          "level": "security-audit",
           "nuke": "exclude"
         }
       ]
@@ -25,12 +25,16 @@
       "name": "production",
       "access": [
         {
-          "github_slug": "data-platform-core-infra",
+          "github_slug": "data-platform-apps-and-tools-production-developer",
           "level": "developer"
         },
         {
-          "github_slug": "data-tech-archs",
-          "level": "developer"
+          "github_slug": "data-platform-apps-and-tools-airflow-users",
+          "level": "mwaa-user"
+        },
+        {
+          "github_slug": "data-platform-audit-and-security",
+          "level": "security-audit"
         }
       ]
     }

diff --git a/environments/data-platform.json b/environments/data-platform.json
@@ -5,78 +5,53 @@
       "name": "development",
       "access": [
         {
-          "github_slug": "data-platform-core-infra",
+          "github_slug": "data-platform-development-sandbox",
           "level": "sandbox",
           "nuke": "exclude"
         },
         {
-          "github_slug": "data-tech-archs",
-          "level": "sandbox",
-          "nuke": "exclude"
-        },
-        {
-          "github_slug": "data-platform-labs",
-          "level": "sandbox",
+          "github_slug": "data-platform-audit-and-security",
+          "level": "security-audit",
           "nuke": "exclude"
-        },
-        {
-          "github_slug": "data-platform-security-and-auditors",
-          "level": "security-audit"
-        },
-        {
-          "github_slug": "data-platform-security-and-auditors",
-          "level": "read-only"
         }
       ]
     },
     {
       "name": "test",
       "access": [
         {
-          "github_slug": "data-platform-core-infra",
-          "level": "developer"
-        },
-        {
-          "github_slug": "data-platform-labs",
+          "github_slug": "data-platform-test-developer",
           "level": "developer"
         },
         {
-          "github_slug": "data-platform-labs",
-          "level": "view-only"
+          "github_slug": "data-platform-audit-and-security",
+          "level": "security-audit"
         }
       ]
     },
     {
       "name": "preproduction",
       "access": [
         {
-          "github_slug": "data-platform-core-infra",
-          "level": "developer"
-        },
-        {
-          "github_slug": "data-platform-labs",
+          "github_slug": "data-platform-preproduction-developer",
           "level": "developer"
         },
         {
-          "github_slug": "data-platform-labs",
-          "level": "view-only"
+          "github_slug": "data-platform-audit-and-security",
+          "level": "security-audit"
         }
       ]
     },
     {
       "name": "production",
       "access": [
         {
-          "github_slug": "data-platform-core-infra",
+          "github_slug": "data-platform-production-developer",
           "level": "developer"
         },
         {
-          "github_slug": "data-platform-labs",
-          "level": "developer"
-        },
-        {
-          "github_slug": "data-platform-labs",
-          "level": "view-only"
+          "github_slug": "data-platform-audit-and-security",
+          "level": "security-audit"
         }
       ]
     }

diff --git a/environments/mi-platform.json b/environments/mi-platform.json
@@ -5,7 +5,7 @@
       "name": "development",
       "access": [
         {
-          "github_slug": "analytical-platform",
+          "github_slug": "mi-platform-development-administrator",
           "level": "administrator"
         }
       ]