Hi folks, If we have the following schema: `defini...
# spicedb
a
Hi folks, If we have the following schema:
Copy code
definition user {}

definition project {
    relation writer: user
    relation reader: user

    permission member = writer + reader

    permission edit = reader
    permission write = writer
}

definition zone {
    relation granted: project

    permission edit = granted->edit
    permission write = granted->write
}

And this relationships:

project:1#reader@user:1
project:2#writer@user:1
zone:1#granted@project:1
zone:1#granted@project:2
Playground available at: https://play.authzed.com/s/2dqpoKAPL_UA We are able to check if an user is able to write in a zone by using `zed permission check zone:1 write user:1 `but we would like to be able to check if a user inherits specifically the "write" permission from one of the projects it relates so. Is it possible to achieve such this behavior? Thanks in advance!
2 Views