Some checks failed
CI / Run lints and checks (push) Failing after 47s
CI / Run tests (push) Failing after 1s
CI / Run race tests (push) Failing after 5s
CI / Build CLI docs (push) Has been skipped
CI / Run buf actions (push) Failing after 5s
CodeQL / Analyze (go) (push) Failing after 3s
CodeQL / Analyze (javascript) (push) Failing after 2s
Docker Image Scanners / scanners (push) Failing after 3s
Format / format (push) Failing after 3s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Draft newsletter (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
30 lines
881 B
TypeScript
30 lines
881 B
TypeScript
// Copyright © 2023 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
import {Namespace, Context} from '@ory/keto-namespace-types'
|
|
|
|
class User implements Namespace {}
|
|
|
|
class Project implements Namespace {
|
|
related: {
|
|
owner: User[]
|
|
developer: User[]
|
|
}
|
|
|
|
permits = {
|
|
isOwner: (ctx: Context) => this.related.owner.includes(ctx.subject),
|
|
isOwnerOrDeveloper: (ctx: Context) =>
|
|
this.related.owner.includes(ctx.subject) ||
|
|
this.related.developer.includes(ctx.subject),
|
|
writeCollaborator: (ctx: Context) =>
|
|
this.permits.isOwner(ctx),
|
|
readCollaborator: (ctx: Context) =>
|
|
this.permits.isOwnerOrDeveloper(ctx),
|
|
deleteProject: (ctx: Context) => this.permits.isOwner(ctx),
|
|
writeProject: (ctx: Context) =>
|
|
this.permits.isOwnerOrDeveloper(ctx),
|
|
readProject: (ctx: Context) =>
|
|
this.permits.isOwnerOrDeveloper(ctx),
|
|
}
|
|
}
|