I have a scenario where certain types of users sho...
# spicedb
b
I have a scenario where certain types of users should not be able to edit their own account. They should always be able to view themselves which would be possible with the proposed `this`/`self` keyword. Is there a way to restrict their ability to edit themselves without having to create an explicit relation that is granted the permission like the following?
Copy code
definition user {
    relation organization: organization
    relation edit_self: user

    permission view = self + organization->view_members
    permission edit = edit_self + organization->edit_members
}
2 Views