9456a4e922
Some checks failed
CI / Run lints and checks (push) Failing after 47s
CI / Run tests (push) Failing after 1s
CI / Run race tests (push) Failing after 5s
CI / Build CLI docs (push) Has been skipped
CI / Run buf actions (push) Failing after 5s
CodeQL / Analyze (go) (push) Failing after 3s
CodeQL / Analyze (javascript) (push) Failing after 2s
Docker Image Scanners / scanners (push) Failing after 3s
Format / format (push) Failing after 3s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Draft newsletter (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
48 lines
1.1 KiB
TypeScript
48 lines
1.1 KiB
TypeScript
// Copyright © 2023 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
import { Namespace, SubjectSet, Context } from "@ory/keto-namespace-types"
|
|
|
|
class User implements Namespace {
|
|
related: {
|
|
manager: User[]
|
|
}
|
|
}
|
|
|
|
class Group implements Namespace {
|
|
related: {
|
|
members: (User | Group)[]
|
|
}
|
|
}
|
|
|
|
class Folder implements Namespace {
|
|
related: {
|
|
parents: (File | Folder)[]
|
|
viewers: SubjectSet<Group, "members">[]
|
|
}
|
|
|
|
permits = {
|
|
view: (ctx: Context): boolean =>
|
|
this.related.viewers.includes(ctx.subject) ||
|
|
this.related.parents.traverse((p) => p.permits.view(ctx)),
|
|
}
|
|
}
|
|
|
|
class File implements Namespace {
|
|
related: {
|
|
parents: (File | Folder)[]
|
|
viewers: (User | SubjectSet<Group, "members">)[]
|
|
owners: (User | SubjectSet<Group, "members">)[]
|
|
}
|
|
|
|
// Some comment
|
|
permits = {
|
|
view: (ctx: Context): boolean =>
|
|
this.related.parents.traverse((p) => p.permits.view(ctx)) ||
|
|
this.related.viewers.includes(ctx.subject) ||
|
|
this.related.owners.includes(ctx.subject),
|
|
|
|
edit: (ctx: Context) => this.related.owners.includes(ctx.subject),
|
|
}
|
|
}
|