Skip to content

Commit

Permalink
Update schema to include a namespace
Browse files Browse the repository at this point in the history
Signed-off-by: Jonathan Marcantonio <[email protected]>
  • Loading branch information
lennysgarage committed Aug 30, 2024
1 parent 212f5b8 commit 2d1587a
Showing 1 changed file with 13 additions and 13 deletions.
26 changes: 13 additions & 13 deletions deploy/schema.yaml
Original file line number Diff line number Diff line change
@@ -1,30 +1,30 @@
schema: |-
definition user {}
definition rbac/user {}
definition group {
relation member: user | group#member
definition rbac/group {
relation member: rbac/user | rbac/group#member
}
definition role {
relation view_the_thing: user:*
definition rbac/role {
relation view_the_thing: rbac/user:*
}
definition role_binding {
relation subject : user | group#member
relation granted: role
definition rbac/role_binding {
relation subject : rbac/user | rbac/group#member
relation granted: rbac/role
permission view_the_thing = subject & granted->view_the_thing
}
definition workspace {
relation parent: workspace
relation user_grant: role_binding
definition rbac/workspace {
relation parent: rbac/workspace
relation user_grant: rbac/role_binding
permission view_the_thing = user_grant->view_the_thing
}
definition thing {
relation workspace: workspace
definition rbac/thing {
relation workspace: rbac/workspace
permission view = workspace->view_the_thing
}

0 comments on commit 2d1587a

Please sign in to comment.