Question

steep-lamp-91158 · Answer

< U02T780HSAH> Ideally there would not be implicit permissions but you have all of them in Keto

clever-shoe-40931 · Answer

Okay Do you have a pointer to implicit permissions

steep-lamp-91158 · Answer

In cases where you say user has permission x when they have permission y you would use subject set rewrites <https github com ory keto issues 263>

steep-lamp-91158 · Answer

but as that is not yet implemented you will have to explicitly add the tuples or alternatively add a logic layer in front of keto that you can then remove once the rewrites are available

steep-lamp-91158 · Answer

maybe <https www youtube com watch v=A IH 1NW7cM> can inspire you wink

clever-shoe-40931 · Answer

It is more along the lines of user X and Y have some permissions each Now Y delegates to X And X gets to do what Y can There may be some restrictions in reality How do I store this in keto

steep-lamp-91158 · Answer

maybe it would then make sense to create a group per user and initially only the user is member of their group then instead of adding tuples like `n obj access user` you add `n obj access users user id can act as` and add one like `users user id can act as user id`

steep-lamp-91158 · Answer

i e every user can act as themselves but you can also have someone else act like you

clever-shoe-40931 · Answer

I haven t internalised the workings far enough how that would work

clever-shoe-40931 · Answer

Then I would need to query for the existence for can act as as well

clever-shoe-40931 · Answer

And I need to do that recursively

steep-lamp-91158 · Answer

no have a look at <https www ory sh keto docs concepts graph of relations>