Hi @chilly-king-10285 kindly verify the OPL and suggest any changes.

import { Namespace, SubjectSet, Context } from "@ory/keto-namespace-types"

class User implements Namespace { } class Role implements Namespace { related: { members: User[] } } class Person implements Namespace { related: { viewers: User[] editors: User[] creators: User[] } } class Email implements Namespace { related: { viewers: User[] editors: User[] creators: User[] } } class PersonEmail implements Namespace { related: { viewers: User[] editors: User[] creators: User[] } } class PhoneNumber implements Namespace { related: { viewers: User[] editors: User[] creators: User[] } } class PersonPhoneNumber implements Namespace { related: { viewers: User[] editors: User[] creators: User[] } } class Authorization implements Namespace { related: { viewers: User[] editors: User[] creators: User[] } } class AppointmentSlotConfiguration implements Namespace { related: { viewers: User[] editors: User[] creators: User[] } } class Provider implements Namespace { related: { viewers: User[] editors: User[] creators: User[] } } class Location implements Namespace { related: { viewers: User[] editors: User[] creators: User[] } } class Appointment implements Namespace { related: { viewers: User[] editors: User[] creators: User[] } } class InsuranceProfile implements Namespace { related: { viewers: User[] editors: User[] creators: User[] } } class InsuranceProfileDetail implements Namespace { related: { viewers: User[] editors: User[] creators: User[] } } // Permission Model class AppointmentCreateModel implements Namespace { related: { insuranceProfiles: InsuranceProfile insuranceProfileDetails: InsuranceProfileDetail persons: Person emails: Email personEmails: PersonEmail phonenumbers: PhoneNumber personPhoneNumbers: PersonPhoneNumber authorizations: Authorization apptSlotConfigurations: AppointmentSlotConfiguration providers: Provider locations: Location appointments: Appointment } // Permission permits = { hasAccess: (ctx: Context): boolean => this.related.insuranceProfiles.related.viewers.includes(ctx.subject) && this.related.insuranceProfileDetails.related.viewers.includes(ctx.subject) && this.related.persons.related.viewers.includes(ctx.subject) && this.related.emails.related.viewers.includes(ctx.subject) && this.related.personEmails.related.viewers.includes(ctx.subject) && this.related.phonenumbers.related.viewers.includes(ctx.subject) && this.related.personPhoneNumbers.related.viewers.includes(ctx.subject) && this.related.authorizations.related.viewers.includes(ctx.subject) && this.related.apptSlotConfigurations.related.viewers.includes(ctx.subject) && this.related.providers.related.viewers.includes(ctx.subject) && this.related.locations.related.viewers.includes(ctx.subject) && this.related.appointments.related.creators.includes(ctx.subject) } } // Module class Schedular implements Namespace { related: { appointmentCreators:Role[] appointmentViewers:Role[] appointmentCreate:AppointmentCreateModel } permits = { createAppointment: (ctx: Context): boolean => this.related.appointmentCreators.includes(ctx.subject) && this.related.appointmentCreate.permits.hasAccess(ctx) } }

A message from kapa.ai