Merge pull request #1892 from sowmya-dixit/release-3.3.0

Security enhancements for data exhaust APIs - configuration changes

ansible/roles/stack-sunbird/defaults/main.yml

@@ -752,3 +752,6 @@ job_request: "{{ env_name }}_job_request"
 
 #### Exhuats API consumer 
 exhaust_api_consumer_ids: ["273f3b18-5dda-4a27-984a-060c7cd398d3"] # being used in analytics api to access the analytics exhaust api
+user_profile_read_url: "http://learner-service:9000/v1/user/read/" # being used in analytics api to get user details
+org_search_url: "http://learner-service:9000/v1/org/search" # being used in analytics api to get mhrd tenant id
+dataexhaust_super_admin_channel: "sunbird" # being used in analytics api for authorizing user with super admin channel
\ No newline at end of file

ansible/roles/stack-sunbird/templates/analytics_api_service.conf

@@ -156,6 +156,11 @@ elasticsearch.index.compositesearch.name="compositesearch"
 elasticsearch.index.dialcodemetrics.name="dialcodemetrics"
 metrics.dialcodemetrics.request.limit=1000
 dataexhaust.authorization_check=true
+user.profile.url="{{ user_profile_read_url }}"
+org.search.url="{{ org_search_url }}"
+standard.dataexhaust.roles=["ORG_ADMIN","REPORT_ADMIN"]
+ondemand.dataexhaust.roles=["ORG_ADMIN","REPORT_ADMIN","CONTENT_CREATOR","COURSE_MENTOR"]
+dataexhaust.super.admin.channel="{{ dataexhaust_super_admin_channel }}"
 storage-service.request-signature-version="AWS4-HMAC-SHA256"
 s3service.region="ap-south-1"
 #channel exhaust configs
@@ -210,4 +215,4 @@ druid.healthcheck.url="druid/coordinator/v1/loadstatus"
 device.api.enable.debug.log=true
 kafka.device.register.topic={{ env_name }}.events.deviceprofile
 kafka.metrics.event.topic={{ env_name }}.pipeline_metrics
-kafka.broker.list="{{ ingestion_kafka_brokers }}"
+kafka.broker.list="{{ ingestion_kafka_brokers }}"
\ No newline at end of file