vroldanbet
11/24/2022, 10:07 AMzed
command line tool, at least to rule out problems with the exposed container portromil
11/24/2022, 10:09 AMromil
11/24/2022, 10:11 AMvroldanbet
11/24/2022, 10:11 AM--log-format=console
vroldanbet
11/24/2022, 10:14 AMuseTransportSecurity
. Can you add .usePlaintext()
romil
11/24/2022, 10:16 AMvroldanbet
11/24/2022, 10:16 AMvroldanbet
11/24/2022, 10:21 AMromil
11/24/2022, 12:17 PMmessage CheckPermissionRequest {
Consistency consistency = 1;
// resource is the resource on which to check the permission or relation.
ObjectReference resource = 2 [ (validate.rules).message.required = true ];
// permission is the name of the permission (or relation) on which to execute
// the check.
string permission = 3 [ (validate.rules).string = {
pattern : "^([a-z][a-z0-9_]{1,62}[a-z0-9])?$",
max_bytes : 64,
} ];
// subject is the subject that will be checked for the permission or relation.
SubjectReference subject = 4 [ (validate.rules).message.required = true ];
bigzofsg
11/24/2022, 7:52 PMbigzofsg
11/24/2022, 7:52 PMbigzofsg
11/24/2022, 7:56 PMbigzofsg
11/24/2022, 7:56 PMbigzofsg
11/24/2022, 7:59 PMbigzofsg
11/24/2022, 8:25 PMJake
11/24/2022, 8:26 PMbigzofsg
11/24/2022, 8:27 PMdefinition user {}
definition team {
relation owner: user
relation manager: user
relation parent: team
relation direct_member: user
permission member = owner + manager + direct_member + team->member
}
// Testing relationships
team:tam#owner@user:phil#...
team:tam#manager@user:reid#...
team:tam#direct_member@user:mark#...
team:stap#owner@user:steven#...
team:stap#direct_member@user:zhinan#...
team:stap#parent@team:tam (What I want to say is: Team TAM is a parent of Team STAP, is this line correct?)
Jake
11/24/2022, 8:28 PMbigzofsg
11/24/2022, 8:29 PMassertTrue:
- "team:tam#owner@user:phil"
- "team:tam#member@user:mark"
- "team:tam#member@user:phil" // this line fails!
bigzofsg
11/24/2022, 8:30 PMJake
11/24/2022, 8:32 PMteam->member
meant to express?Jake
11/24/2022, 8:32 PMteam
isn’t a valid relation namebigzofsg
11/24/2022, 8:33 PMbigzofsg
11/24/2022, 8:34 PMbigzofsg
11/24/2022, 8:35 PMbigzofsg
11/24/2022, 8:35 PMbigzofsg
11/24/2022, 8:39 PM// Testing relationships
**team:tam#owner@user:phil#...**
team:tam#manager@user:reid#...
team:tam#direct_member@user:mark#...
team:stap#owner@user:steven#...
team:stap#direct_member@user:zhinan#...
team:stap#parent@team:tam (What I want to say is: Team TAM is a parent of Team STAP, is this line correct?)
// WHy would this assertion below not work:
assertTrue:
- "team:tam#owner@user:phil"
Jake
11/24/2022, 8:40 PMbigzofsg
11/24/2022, 8:46 PMbigzofsg
11/24/2022, 8:46 PM