Hi. I've uncovered a behaviour that's surprising (...
# spicedb
w
Hi. I've uncovered a behaviour that's surprising (to me) w.r.t 'subject relations' and their interactions with permissions. Given a subject relation like
relation members: person_group#members
if a permission calls into the relation using
->
it appears to be hitting the person_group, rather than the members. https://play.authzed.com/s/m2F3L91T2vKH/schema contains example schema and assertions that show the behaviour. Maybe this is intended - but in which case I don't understand the usecases where a 'subject relation' is appropriate.
2 Views