# yaml-language-server: $schema=https://api.cerbos.dev/latest/cerbos/policy/v1/Policy.schema.json
---
apiVersion: api.cerbos.dev/v1
resourcePolicy:
  version: default
  resource: product
  schemas:
    principalSchema:
      ref: cerbos:///principal.json
  importDerivedRoles:
    - content_roles
    - workstation_roles
  variables:
    import:
    - account_feature_controls
  rules:
  - name: view_metadata_wildcard
    actions:
      - view:metadata:*
    derivedRoles:
      - workstation_catalog
      - workstation_admin
      - content_ccm_digital_audio_can_bulk_create
    effect: EFFECT_ALLOW
  - name: update_metadata_wildcard
    actions:
      - update:metadata:*
    derivedRoles:
      - workstation_catalog
      - workstation_admin
      - content_ccm_digital_audio_can_bulk_create
    effect: EFFECT_ALLOW
  - name: delete_metadata_wildcard
    actions:
      - delete:metadata:*
    derivedRoles:
      - workstation_catalog
      - workstation_admin
    effect: EFFECT_ALLOW