feat: authorize requests to create sparkles

1 files changed, 21 insertions, 0 deletions

diff --git a/app/domain/permission.go b/app/domain/permission.go
new file mode 100644
index 0000000..53d4754
--- /dev/null
+++ b/app/domain/permission.go
@@ -0,0 +1,21 @@
+package domain
+
+import (
+	v1 "github.com/authzed/authzed-go/proto/authzed/api/v1"
+)
+
+type Permission string
+
+func (p Permission) RequestFor(user Identifiable, resource Identifiable) *v1.CheckPermissionRequest {
+	return &v1.CheckPermissionRequest{
+		Subject: &v1.SubjectReference{
+			Object: user.ToObjectReference(),
+		},
+		Permission: p.String(),
+		Resource:   resource.ToObjectReference(),
+	}
+}
+
+func (p Permission) String() string {
+	return string(p)
+}