satoshinotkamoto2710
10/16/2025, 4:07 AMowner with active org_unit and resolved ticket. I don't want to merge the ticket_is_resolved and org_unit_is_active caveats into one caveat, because i want to use it in multiple definition
caveat ticket_is_resolved(ticket_status string) {
ticket_status == "resolved"
}
caveat org_unit_is_active(org_status string) {
org_status == "active"
}
definition user/human {}
definition resource/ticket {
relation owner: user/human with ticket_is_resolved | user/human with org_unit_is_active
permission escalate = owner
}
resource/ticket:ticket_id#owner@user/human:user_id[ticket_is_resolved, org_unit_is_active]