chore: add standard roles to spice schema

1 files changed, 14 insertions, 6 deletions

diff --git a/etc/authzd/spice.schema b/etc/authzd/spice.schema
index 0f3494f7..96e753bf 100644
--- a/etc/authzd/spice.schema
+++ b/etc/authzd/spice.schema
@@ -1,19 +1,27 @@
 definition user {}
 
-definition project {
+definition group {
+  relation parent: group
+
   relation guest: user
   relation planner: user
   relation reporter: user
   relation developer: user
   relation maintainer: user
   relation owner: user
-  relation admin: user
-
-  permission read = developer + maintainer
-  permission write = maintainer
 }
 
-definition group {
+definition project {
+  relation parent: group
+
+  relation guest: user
+  relation planner: user
+  relation reporter: user
+  relation developer: user
+  relation maintainer: user
+  relation owner: user
+
+  permission push_code = developer + maintainer + owner + parent->developer + parent->maintainer + parent->owner
 }
 
 definition resource {