/
wildcardnested.yaml
35 lines (30 loc) · 1.18 KB
/
wildcardnested.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
---
schema: >-
definition test/user {}
definition test/resource {
relation viewer: test/user | test/user:*
relation banned: test/user
relation mustbehere: test/user
permission view = viewer - banned
permission specialview = view & mustbehere
}
relationships: |
test/resource:first#viewer@test/user:*
test/resource:first#banned@test/user:bannedguy
test/resource:first#mustbehere@test/user:somegal
assertions:
assertTrue:
- "test/resource:first#viewer@test/user:somegal"
- "test/resource:first#viewer@test/user:anotherperson"
- "test/resource:first#viewer@test/user:thirduser"
- "test/resource:first#viewer@test/user:bannedguy"
- "test/resource:first#view@test/user:somegal"
- "test/resource:first#view@test/user:anotherperson"
- "test/resource:first#view@test/user:thirduser"
- "test/resource:first#mustbehere@test/user:somegal"
- "test/resource:first#specialview@test/user:somegal"
assertFalse:
- "test/resource:first#view@test/user:bannedguy"
- "test/resource:first#specialview@test/user:bannedguy"
- "test/resource:first#specialview@test/user:anotherperson"
- "test/resource:first#specialview@test/user:thirduser"