ReBAC 2

Polar_ReBAC_2.polar

actor User {}

global {
  roles = ["admin"];
}

resource Vehicle {
  permissions = ["security", "update", "updateAuthorizedUsers"];
  roles = ["admin", "manager", "driver"];
  relations = { currentlyBookedBy: User };

  "driver" if "currentlyBookedBy";

  "security" if "driver";
  "update" if "manager";
  "updateAuthorizedUsers" if "admin";

  "admin" if global "admin";
  "manager" if "admin";
  "driver" if "manager";
}