Add permissions to tagging schema (#1003)

src/rpdk/core/contract/resource_client.py

@@ -837,6 +837,9 @@ def metadata_contains_tag_property(self):
         except KeyError:
             return False
 
+    def get_tagging_permissions(self):
+        return self._schema.get("tagging", {}).get("permissions", [])
+
     def validate_model_contain_tags(self, inputs):
         assertion_error_message = "Contract test inputs does not contain tags property."
         try:

src/rpdk/core/data/schema/provider.definition.schema.v1.json

@@ -145,6 +145,13 @@
                     "description": "A reference to the Tags property in the schema.",
                     "$ref": "http://json-schema.org/draft-07/schema#/properties/$ref",
                     "default": "/properties/Tags"
+                },
+                "permissions": {
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    },
+                    "additionalItems": false
                 }
             },
             "required": [

tests/contract/test_resource_client.py

@@ -1538,6 +1538,18 @@ def test_metadata_contains_tag_property(resource_client):
     assert resource_client.metadata_contains_tag_property()
 
 
+@pytest.mark.parametrize(
+    "schema,result",
+    [
+        ({"tagging": {"permissions": ["test:permission"]}}, ["test:permission"]),
+        ({}, []),
+    ],
+)
+def test_get_tagging_permission(resource_client, schema, result):
+    resource_client._update_schema(schema)
+    assert resource_client.get_tagging_permissions() == result
+
+
 def test_validate_model_contain_tags(resource_client):
     schema = {"tagging": {"taggable": True, "tagProperty": "/properties/Tags"}}
     resource_client._update_schema(schema)