in source/user-manager/cognito-user.js [406:436]
module.exports.getPolicyTemplate = function(policyType, policyConfig) {
var policyTemplate = {};
// create the ARN prefixes for policies
var arnPrefix = 'arn:aws:dynamodb:' + policyConfig.region + ':' + policyConfig.accountId + ':table/';
var databaseArnPrefix = 'arn:aws:dynamodb:' + policyConfig.region + ':' + policyConfig.accountId + ':table/';
var cognitoArn = 'arn:aws:cognito-idp:' + policyConfig.region + ':' + policyConfig.accountId + ':userpool/' + policyConfig.userPoolId;
// populate database params
// setup params for templates
var policyParams = {
tenantId: policyConfig.tenantId,
arnPrefix: arnPrefix,
cognitoArn: cognitoArn,
tenantTableArn: databaseArnPrefix + policyConfig.tenantTableName,
userTableArn: databaseArnPrefix + policyConfig.userTableName,
productTableArn: databaseArnPrefix + policyConfig.productTableName,
orderTableArn: databaseArnPrefix + policyConfig.orderTableName
}
if (policyType === configuration.userRole.systemAdmin) {
policyTemplate = getSystemAdminPolicy(policyParams);
} else if (policyType === configuration.userRole.systemUser) {
policyTemplate = getSystemUserPolicy(policyParams);
} else if (policyType === configuration.userRole.tenantAdmin) {
policyTemplate = getTenantAdminPolicy(policyParams);
} else if (policyType === configuration.userRole.tenantUser) {
policyTemplate = getTenantUserPolicy(policyParams);
}
return policyTemplate;
}