# Osocloud POC

## Goal
Demonstrate osocloud's ability to handle scenarios described: https://www.notion.so/Evaluation-Scenarios-01fc31de41ee484f9a65371aa3072afb

## Directory Structure and Usage
There are three directories, corresponding to the three interaction points with Osocloud:

* oso-facts: sync basic user, role, and access information using oso python client

```sh
cd oso-facts
poetry install
export OSO_AUTH=...
poetry run python oso-facts/main.py
```

* oso-policies: upload entire policy definition (see `orchard.polar`) using oso cli

```sh
cd oso-policies
export OSO_AUTH=...
sh update-policies.sh
```

* oso-tester: triple-for-loop (AWW YEAH) evaluating all permutations of authorization check on users, resources, and actions using oso python client. output written to `oso-tester/results.txt` for comparison with other tools, as well as # checks / timing.

```sh
cd oso-tester
poetry install
export OSO_AUTH=...
poetry run python oso-tester/main.py
```