careful-honey-27437
05/06/2025, 7:16 AMArticle:abcdefg12345
. When querying ory keto
or ory is allowed
to determine the permits related to that ObjectId, does the Article:
prefix have any significance, specifically regarding Namespace?brief-egg-61061
05/06/2025, 7:16 AMbrief-egg-61061
05/06/2025, 7:17 AMbrief-egg-61061
05/06/2025, 7:19 AMbrief-egg-61061
05/06/2025, 7:19 AMArticle:
prefix in Article:abcdefg12345
is significant because it typically denotes the namespace of the object. Namespaces in Ory Permissions are used to scope objects and subjects, and they define which relationships and permission rules apply to those objects. When you query permissions (for example, using ory is allowed
or the Keto API), you usually specify the namespace and the object separately. For instance, in the CLI, you would use: ory is allowed <subject> <relation> <namespace> <object>
So, for your example, if you have an object with ID abcdefg12345
in the Article
namespace, you would query it like this: ory is allowed <subject> <relation> Article abcdefg12345
Here, Article
is the namespace, and abcdefg12345
is the object ID. The Article:
prefix is not part of the object ID itself but is used to indicate the namespace in documentation and relationship notation. When using the CLI or API, you should provide the namespace and object as separate parameters, not as a single string with a colon. Summary: - The Article:
prefix indicates the namespace. - When querying, provide the namespace and object ID separately, not as a single string. For more details, see the [Ory Keto documentation on namespaces](https://www.ory.sh/docs/keto/concepts/namespaces) and the [CLI usage](https://www.ory.sh/docs/cli/ory-is-allowed#ory-is-allowed) for permission checks.