9456a4e922
Some checks failed
CI / Run lints and checks (push) Failing after 47s
CI / Run tests (push) Failing after 1s
CI / Run race tests (push) Failing after 5s
CI / Build CLI docs (push) Has been skipped
CI / Run buf actions (push) Failing after 5s
CodeQL / Analyze (go) (push) Failing after 3s
CodeQL / Analyze (javascript) (push) Failing after 2s
Docker Image Scanners / scanners (push) Failing after 3s
Format / format (push) Failing after 3s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Draft newsletter (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
96 lines
2.5 KiB
Go
96 lines
2.5 KiB
Go
// Copyright © 2023 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
rts "github.com/ory/keto/gen/go/ory/keto/relation_tuples/v1alpha2"
|
|
|
|
"google.golang.org/grpc"
|
|
"google.golang.org/grpc/credentials/insecure"
|
|
)
|
|
|
|
func main() {
|
|
conn, err := grpc.NewClient("127.0.0.1:4467", grpc.WithTransportCredentials(insecure.NewCredentials()))
|
|
if err != nil {
|
|
panic("Encountered error: " + err.Error())
|
|
}
|
|
|
|
client := rts.NewWriteServiceClient(conn)
|
|
|
|
//directories:/photos#owner@maureen
|
|
//files:/photos/beach.jpg#owner@maureen
|
|
//files:/photos/mountains.jpg#owner@laura
|
|
//directories:/photos#access@laura
|
|
//directories:/photos#access@(directories:/photos#owner)
|
|
//files:/photos/beach.jpg#access@(files:/photos/beach.jpg#owner)
|
|
//files:/photos/beach.jpg#access@(directories:/photos#access)
|
|
//files:/photos/mountains.jpg#access@(files:/photos/mountains.jpg#owner)
|
|
//files:/photos/mountains.jpg#access@(directories:/photos#access)
|
|
|
|
tuples := []*rts.RelationTuple{
|
|
// ownership
|
|
{
|
|
Namespace: "directories",
|
|
Object: "/photos",
|
|
Relation: "owner",
|
|
Subject: rts.NewSubjectID("maureen"),
|
|
},
|
|
{
|
|
Namespace: "files",
|
|
Object: "/photos/beach.jpg",
|
|
Relation: "owner",
|
|
Subject: rts.NewSubjectID("maureen"),
|
|
},
|
|
{
|
|
Namespace: "files",
|
|
Object: "/photos/mountains.jpg",
|
|
Relation: "owner",
|
|
Subject: rts.NewSubjectID("laura"),
|
|
},
|
|
// granted access
|
|
{
|
|
Namespace: "directories",
|
|
Object: "/photos",
|
|
Relation: "access",
|
|
Subject: rts.NewSubjectID("laura"),
|
|
},
|
|
}
|
|
// should be subject set rewrite
|
|
// owners have access
|
|
for _, o := range []struct{ n, o string }{
|
|
{"files", "/photos/beach.jpg"},
|
|
{"files", "/photos/mountains.jpg"},
|
|
{"directories", "/photos"},
|
|
} {
|
|
tuples = append(tuples, &rts.RelationTuple{
|
|
Namespace: o.n,
|
|
Object: o.o,
|
|
Relation: "access",
|
|
Subject: rts.NewSubjectSet(o.n, o.o, "owner"),
|
|
})
|
|
}
|
|
// should be subject set rewrite
|
|
// access on parent means access on child
|
|
for _, obj := range []string{"/photos/beach.jpg", "/photos/mountains.jpg"} {
|
|
tuples = append(tuples, &rts.RelationTuple{
|
|
Namespace: "files",
|
|
Object: obj,
|
|
Relation: "access",
|
|
Subject: rts.NewSubjectSet("directories", "/photos", "access"),
|
|
})
|
|
}
|
|
|
|
_, err = client.TransactRelationTuples(context.Background(), &rts.TransactRelationTuplesRequest{
|
|
RelationTupleDeltas: rts.RelationTupleToDeltas(tuples, rts.RelationTupleDelta_ACTION_INSERT),
|
|
})
|
|
if err != nil {
|
|
panic("Encountered error: " + err.Error())
|
|
}
|
|
|
|
fmt.Println("Successfully created tuples")
|
|
}
|