Joey
05/19/2022, 7:31 PMPrchowdh
05/19/2022, 7:48 PMPrchowdh
05/19/2022, 7:48 PMJoey
05/19/2022, 8:09 PMdefinition user {}
definition department {
relation manager: user
relation view_employee: department#manager
relation transfer_employee: department#manager
}
definition employee {
relation department: department
permission view = department->view_employee
permission transfer = department->transfer_employee
}
Joey
05/19/2022, 8:09 PMmanager
relation into view_employee
if managers can view employeesJoey
05/19/2022, 8:09 PMtransfer_employee
Joey
05/19/2022, 8:09 PMyetitwo
05/20/2022, 5:34 PMJoey
05/20/2022, 6:32 PMJoey
05/20/2022, 6:33 PMSingha1
05/20/2022, 8:02 PMJoey
05/20/2022, 8:48 PMHOPE
05/23/2022, 9:46 AMorganization
under which has workspace
, workspace
has permission view
. I'd like to get all workspaces that a user has view permission under a certain organization. How can I achieve this? Thank you..Jake
05/23/2022, 1:47 PMJake
05/23/2022, 1:48 PMdaniso
05/23/2022, 4:24 PMdefinition resource {
relation manager: user
relation owner: user
permission own = owner
permission manage = manager + own
}
What I'd like to have is, given resource_type=resource, relation=owner
return a list of permission an owner has on the resource type resource
, in this case it would be [own, manage]
. while if I query manager
would be [manage]
. This could be useful so that I don't have to hardcode the permission hierarchy in my code, but query it directly from spiceJoey
05/23/2022, 4:39 PMJoey
05/23/2022, 4:40 PMPrchowdh
05/23/2022, 5:01 PMJoey
05/23/2022, 5:24 PMPrchowdh
05/23/2022, 5:25 PMJoey
05/23/2022, 5:25 PMJoey
05/23/2022, 5:25 PMJoey
05/23/2022, 5:26 PMdefinition container {
relation viewer: user
permission view = viewer
}
definition resource {
relation container: container
relation viewer: user
permission view = viewer + container->view
}
Joey
05/23/2022, 5:26 PMJoey
05/23/2022, 5:26 PMSingha1
05/23/2022, 6:03 PMJoey
05/23/2022, 6:12 PMLookupResources
to find the accessible resources and then pass that list to your search (2) post-filtering: conduct the search and Check
each result after the factJoey
05/23/2022, 6:13 PMSingha1
05/23/2022, 6:20 PM