francium-lupe

authorized = await oso.authorize(
  { type: 'User', id: 'Bill' },
  'edit',
  { type: 'Issue', id: 'tps-reports-99' }
);
console.log(authorized); // true

francium-lupe

// Issue `tps-reports-99` belongs to repository `tps-reports`
await oso.tell(
  'has_relation', // Fact type
  { type: 'Issue', id: 'tps-reports-99' }, // Resource
  'repository', // Relation
  { type: 'Repository', id: 'tps-reports' } // Actor
);  

// User `Bill` has role `admin` on repository `tps-reports`
await oso.tell(

francium-lupe

resource Issue {
  # Permissions
  permissions = ["edit"];

  # Roles
  roles = ["editor"];

  # UPDATED: added repository Relation
  relations = { creator: User, repository: Repository };

francium-lupe

resource Repository {
  # UPDATED: added roles to Repository
  roles = ["admin"];
}

francium-lupe

const authorized = await oso.authorize(
  { type: 'User', id: 'Peter' },
  'edit',
  { type: 'Issue', id: 'tps-reports-99' }
);
console.log(authorized); // true

francium-lupe

await oso.tell(
  'has_relation', // Fact type
  { type: 'Issue', id: 'tps-reports-99' }, // Resource
  'creator', // Relation
  { type: 'User', id: 'Peter' } // Actor
);

francium-lupe

const authorized = await oso.authorize(
  { type: 'User', id: 'Peter' },
  'edit',
  { type: 'Issue', id: 'tps-reports-99' }
);
console.log(authorized); // false

francium-lupe

resource Issue {
  # Permissions
  permissions = ["edit"];

  # Roles
  roles = ["editor"];

  # UPDATED: added relationships
  relations = { creator: User };

francium-lupe

await oso.tell(
  'has_role', // Fact type
  { type: 'User', id: 'Bill' }, // Actor
  'editor', // Role
  { type: 'Issue', id: 'tps-reports-99' } // Resource
);

francium-lupe

const authorized = await oso.authorize(
  { type: 'User', id: 'Bill' },
  'edit',
  { type: 'Issue', id: 'tps-reports-99' }
);
console.log(authorized); // false