Initial QSfera import

Server/devtools/deployments/service_policies/policies/proxy.rego

@@ -0,0 +1,33 @@
+package proxy
+
+import future.keywords.if
+import data.utils
+
+default granted := true
+
+granted = false if {
+    input.request.method == "PUT"
+    pathPrefixes := [
+        "/dav",
+        "/remote.php/webdav",
+        "/remote.php/dav",
+        "/webdav",
+    ]
+    restricted := pathPrefixes[_]
+    startswith(input.request.path, restricted)
+    not utils.is_extension_allowed(input.resource.name)
+}
+
+granted = false if {
+    input.request.method == "POST"
+    pathPrefixes := [
+        "/data",
+        "/dav",
+        "/remote.php/webdav",
+        "/remote.php/dav",
+        "/webdav",
+    ]
+    restricted := pathPrefixes[_]
+    startswith(input.request.path, restricted)
+    not utils.is_extension_allowed(input.resource.name)
+}