Polar 1

Polar_RBAC_vehicle.polar

actor User {}

# "admin" is a global role that applies to all vehicles
global {
  roles = ["admin"];
}

resource Vehicle {
  permissions = ["security", "update", "updateAuthorizedUsers"];
  roles = ["admin", "manager", "booked-user"];

  "security" if "booked-user";
  "update" if "manager";
  "updateAuthorizedUsers" if "admin";

  "admin" if global "admin";
  "manager" if "admin";
  "driver" if "manager";
}