suggestion for improvement in the "site wide super...
# spicedbf
fierro9418
02/16/2023, 2:27 AMsuggestion for improvement in the "site wide super-admin access example"
fierro9418
02/16/2023, 2:28 AMthe full example schema is
Copy code
definition platform {
relation administrator: user
permission super_admin = administrator
}
definition organization {
// The platform is generally a singleton pointing to the same
// platform object, on which the superuser is in turn granted
// access.
relation platform: platform
permission admin = platform->super_admin
}
definition resource {
relation owner: user | organization
permission admin = owner + owner->admin
}
definition user {}fierro9418
02/16/2023, 2:28 AMmy suggestion is to add another
administratorfierro9418
02/16/2023, 2:29 AMso the
organization Copy code
definition organization {
// The platform is generally a singleton pointing to the same
// platform object, on which the superuser is in turn granted
// access.
relation platform: platform
relation administrator: user
permission admin = administrator + platform->super_admin
}fierro9418
02/16/2023, 2:30 AMthis makes sense to me but I may have missed the intent of the example. just my two cents
v
vroldanbet
02/16/2023, 9:34 AM👋🏻it's fair feedback, and I agree the pattern you describe is pretty common, and may be more what users may be looking for in an example like this. My guess is the example tried to capture the notion of a "top-level overarching object" that folks seem to struggle to come up with.
j
jzelinskie
02/16/2023, 6:37 PMperhaps it's worth a PR to the examples repository? https://github.com/authzed/examples
f
fierro9418
02/17/2023, 3:44 AMwill put up a PR -- just wanted to make sure I didn't miss the intent or that there was a good reason for the relations absence. Confidence in schema decisions slowly rising but still fairly low. thx!