albertoe
06/19/2024, 2:51 PMdefinition user {}
definition project {
relation writer: user
relation reader: user
permission member = writer + reader
permission edit = reader
permission write = writer
}
definition zone {
relation granted: project
permission edit = granted->edit
permission write = granted->write
}
And this relationships:
project:1#reader@user:1
project:2#writer@user:1
zone:1#granted@project:1
zone:1#granted@project:2
Playground available at: https://play.authzed.com/s/2dqpoKAPL_UA
We are able to check if an user is able to write in a zone by using `zed permission check zone:1 write user:1 `but we would like to be able to check if a user inherits specifically the "write" permission from one of the projects it relates so. Is it possible to achieve such this behavior?
Thanks in advance!