Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Does Ory Network have subject set rewrites or is it unimplemented for Self-Hosted and Cloud?

Hello,
it is the same for self-hosted Ory Keto and Ory Permissions.
AFAIK it is implemented
Is that correct <@U010UKXCPP0> ?

So, if I create a role that wants to inherit another role, I can do so like this?

user role
```namespace:"*"#LIST@(authz:{group_uuid}#user)
namespace:{obj_uuid}#GET@(authz:{group_uuid}#user)```
admin role inherits user role
```authz:{group_uuid}#user@(authz:{group_uuid}#admin)```

have a look at <https://www.ory.sh/docs/keto/modeling/create-permission-model>

I found an example for rewrites, but it says it isn't supported yet:
<https://www.ory.sh/docs/keto/guides/expand-api-display-who-has-access>
```// the following tuples are defined implicitly through subject set rewrites (not supported yet)```