One thing I quite don't understand about RBAC with...
# talk-keto
d
One thing I quite don't understand about RBAC with Keto is how I would make a child of an Object inherit the rules of the parent or vice versa. I see this example below but have no idea how you would handle this with the gRPC/API
dir1#child@(file1#)
This link has no information when searched on the keto page. https://www.ory.sh/docs/keto/guides/access-control-inheritance
n
Hi, currently you'd have to insert the same tuples for
file1
as for
dir1
, so if you insert
dir1#editor@user1
into Keto, you also insert
file1#editor@user1
. In the (near!) future, this (and many other use cases) will be solved with userset rewrites (see https://github.com/ory/keto/issues/263).
d
Okay that sounds good. Thank you