Hi there I was trying to set up the environment locally and Ory Community #talk-keto

Hi there, I was trying to set up the environment l...

steep-thailand-93069

08/17/2023, 12:40 PM

Hi there, I was trying to set up the environment locally and ran into some issues following the ORY-Keto example, and I guess something I'm wrong about. https://www.ory.sh/docs/keto/guides/rbac I'm trying to recreate the conditions via CURL.

curl -XPUT --data '{"namespace": "reports", "object": "finance", "relation": "view", "subject_set": {"namespace": "groups", "object": "finance", "relation": "member"}}' <http://localhost:4467/admin/relation-tuples>

curl -XPUT --data '{"namespace": "reports", "object": "community", "relation": "view", "subject_set": { "namespace": "groups", "object": "community", "relation": "member" }}' <http://localhost:4467/admin/relation-tuples>

curl -XPUT --data '{  "namespace": "reports", "object": "marketing",  "relation": "view", "subject_set": { "namespace": "groups",  "object": "marketing", "relation": "member" }}' <http://localhost:4467/admin/relation-tuples>

curl -XPUT --data '{ "namespace": "reports", "object": "finance", "relation": "edit", "subject_set": {"namespace": "groups", "object": "admin","relation": "member" }}' <http://localhost:4467/admin/relation-tuples>

curl -XPUT --data '{ "namespace": "reports", "object": "community","relation": "edit", "subject_set": { "namespace": "groups","object": "admin", "relation": "member"}}' <http://localhost:4467/admin/relation-tuples>

curl -XPUT --data '{"namespace": "reports", "object": "marketing","relation": "edit", "subject_set": {"namespace": "groups","object": "admin","relation": "member"}}' <http://localhost:4467/admin/relation-tuples>

curl -XPUT --data '{ "namespace": "reports", "object": "finance", "relation": "view", "subject_set": { "namespace": "groups", "object": "admin", "relation": "member" }}' <http://localhost:4467/admin/relation-tuples>

curl -XPUT --data '{ "namespace": "reports", "object": "community", "relation": "view", "subject_set": { "namespace": "groups", "object": "admin", "relation": "member" }}' <http://localhost:4467/admin/relation-tuples>

curl -XPUT --data '{ "namespace": "reports","object": "marketing","relation": "view","subject_set": { "namespace": "groups", "object": "admin", "relation": "member" }}' <http://localhost:4467/admin/relation-tuples>

curl -XPUT --data '{ "namespace": "groups", "object": "finance","relation": "member", "subject_id": "Lila"}' <http://localhost:4467/admin/relation-tuples>

curl -XPUT --data '{"namespace": "groups","object": "community", "relation": "member","subject_id": "Dilan"}' <http://localhost:4467/admin/relation-tuples>

curl -XPUT --data '{ "namespace": "groups", "object": "marketing", "relation": "member", "subject_id": "Hadley"}' <http://localhost:4467/admin/relation-tuples>

curl -XPUT --data '{ "namespace": "groups", "object": "admin", "relation": "member", "subject_id": "Neel"}' <http://localhost:4467/admin/relation-tuples>

curl <http://localhost:4466/relation-tuples>

{"relation_tuples":[{"namespace":"reports","object":"finance","relation":"view","subject_set":{"namespace":"groups","object":"finance","relation":"member"}},{"namespace":"reports","object":"marketing","relation":"edit","subject_set":{"namespace":"groups","object":"admin","relation":"member"}},{"namespace":"reports","object":"marketing","relation":"view","subject_set":{"namespace":"groups","object":"admin","relation":"member"}},{"namespace":"reports","object":"community","relation":"edit","subject_set":{"namespace":"groups","object":"admin","relation":"member"}},{"namespace":"groups","object":"marketing","relation":"member","subject_id":"Hadley"},{"namespace":"reports","object":"community","relation":"view","subject_set":{"namespace":"groups","object":"admin","relation":"member"}},{"namespace":"reports","object":"marketing","relation":"view","subject_set":{"namespace":"groups","object":"marketing","relation":"member"}},{"namespace":"reports","object":"community","relation":"view","subject_set":{"namespace":"groups","object":"community","relation":"member"}},{"namespace":"groups","object":"admin","relation":"member","subject_id":"Neel"},{"namespace":"groups","object":"community","relation":"member","subject_id":"Dilan"},{"namespace":"groups","object":"finance","relation":"member","subject_id":"Lila"},{"namespace":"reports","object":"finance","relation":"view","subject_set":{"namespace":"groups","object":"admin","relation":"member"}},{"namespace":"reports","object":"finance","relation":"edit","subject_set":{"namespace":"groups","object":"admin","relation":"member"}}],"next_page_token":""}

curl -XPOST --data '{"relation": "member", "subject_id": "Dilan"}' <http://localhost:4466/relation-tuples/check>

{"allowed":false}
BTW I'm using the oryd/keto:v0.11.1-alpha.0 version. I would like to receive some feedback about why I get {"allowed":false} when I need to get {"allowed":true} as the response. Thanks in advance!

steep-thailand-93069

08/17/2023, 2:41 PM

I found my mistake. The correct curl was

curl -XPOST --data '{"namespace":"groups", "relation": "member", "object":"admin","subject_id": "Neel"}' <http://localhost:4466/relation-tuples/check>

{"allowed":true}

4 Views

Open in Slack

Previous Next