feat: authorize http resources

1 files changed, 10 insertions, 0 deletions

diff --git a/etc/authzd/spice.schema b/etc/authzd/spice.schema
index 5f5c0dab..0f3494f7 100644
--- a/etc/authzd/spice.schema
+++ b/etc/authzd/spice.schema
@@ -15,3 +15,13 @@ definition project {
 
 definition group {
 }
+
+definition resource {
+  relation reader: user | user:*
+  relation writer: user | user:*
+
+  permission read = reader + writer
+  permission create = writer
+  permission update = writer
+  permission delete = writer
+}