feat/arborist

[rudyardrichter]

New Features

• Configure new clients with arborist policies using --arborist and --policies flags for fence-create
• Use arborist for authorization checks on downloading data files from indexd, as long as the authz field is present in the index record

Breaking Changes

• Users' RBAC policies are now owned by arborist, not fence, so the tables are removed from fence/userdatamodel.
• The usersync is updated to work specifically with the new arborist version.
• In general, this and following versions of fence should be deployed only with arborist>=2.0.0

[PlanXCyborg]

This PR contains code that is not formatted correctly according to black. Run black on your code before merging.

Expand the full diff to see formatting changes

--- fence/__init__.py
+++ blackened
@@ -15,11 +15,11 @@
 from fence.oidc.server import server
 from fence.rbac.client import ArboristClient
 from fence.resources.aws.boto_manager import BotoManager
 from fence.resources.openid.google_oauth2 import GoogleOauth2Client as GoogleClient
 from fence.resources.openid.microsoft_oauth2 import (
-    MicrosoftOauth2Client as MicrosoftClient
+    MicrosoftOauth2Client as MicrosoftClient,
 )
 from fence.resources.openid.orcid_oauth2 import OrcidOauth2Client as ORCIDClient
 from fence.resources.storage import StorageManager
 from fence.resources.user.user_session import UserSessionInterface
 from fence.error_handler import get_error_response

This formatting comment was generated automatically by a script in uc-cdis/wool.