From e1eb7946a1aeffe3e8300792bf70dafbcd92f965 Mon Sep 17 00:00:00 2001 From: mo khan Date: Tue, 22 Jul 2025 18:05:44 -0600 Subject: chore: load schema and relationships via relationships.yaml file --- etc/authzd/relationships.yaml | 12 ++++++++++++ etc/authzd/schema.zed | 9 +++++++++ etc/authzd/spice.schema | 9 --------- 3 files changed, 21 insertions(+), 9 deletions(-) create mode 100644 etc/authzd/relationships.yaml create mode 100644 etc/authzd/schema.zed delete mode 100644 etc/authzd/spice.schema (limited to 'etc/authzd') diff --git a/etc/authzd/relationships.yaml b/etc/authzd/relationships.yaml new file mode 100644 index 0000000..261ec36 --- /dev/null +++ b/etc/authzd/relationships.yaml @@ -0,0 +1,12 @@ +schemaFile: "./schema.zed" +relationships: >- + sparkle:1#author@user:mokhax + + sparkle:1#reader@user:tanuki +assertions: + assertTrue: + - "sparkle:1#write@user:mokhax" + - "sparkle:1#read@user:mokhax" + - "sparkle:1#read@user:tanuki" + assertFalse: + - "sparkle:1#write@user:tanuki" diff --git a/etc/authzd/schema.zed b/etc/authzd/schema.zed new file mode 100644 index 0000000..8a98ab1 --- /dev/null +++ b/etc/authzd/schema.zed @@ -0,0 +1,9 @@ +definition user {} + +definition sparkle { + relation reader: user + relation author: user + + permission read = reader + author + permission write = author +} diff --git a/etc/authzd/spice.schema b/etc/authzd/spice.schema deleted file mode 100644 index 8a98ab1..0000000 --- a/etc/authzd/spice.schema +++ /dev/null @@ -1,9 +0,0 @@ -definition user {} - -definition sparkle { - relation reader: user - relation author: user - - permission read = reader + author - permission write = author -} -- cgit v1.2.3