type project{
    relation admin:  user 
}

type project{
    relation admin:  user 
}

type project{
    relation admin:  group#all_member  
}

permission view = creator->manager->user

permission manager_user = manager->user

->user

definition user {
}

definition employee {
    relation user: user
    relation manager: employee
}

definition expense {
    relation creator: employee 
    // creator of expense can view
    permission view = creator->user

    // manager of creator of expense can view
    // multiple hierarchal lookup 'creator->manager->user' doesn't work because `Nested arrows not yet supported`
    // permission view = creator->manager->user
}

// facts
// employee:abc#user@user:1
// expense:1#creator@employee:abc
// employee:xyz#user@user:2
// employee:abc#manager@employee:xyz

// assertions
// - "expense:1#view@user:1"
// - "expense:1#view@user:2"`

permission manager_user = manager->user

manager

expense

employee

manager: employee#user

CheckPermissionResponse.Permissionship

PERMISSIONSHIP_CONDITIONAL_PERMISSION