Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi Ory team,
I’m in the process of building a POC permission model using Ory Keto and in need of a small clarification.
Assume I have a set of projects (projectFoo, projectBar, projectZoo). Now I assume the following permissions are correct
```projects:projectFoo#edit@john
projects:projectBar#edit@john
projects:projectZoo#edit@john```
The above gives john edit access to all 3 projects. However, instead of specifying each relation individually, is there a way to specify that john has edit access to all the projects in the projects namespace?

My approach was to use a wildcard check alongside the object , so I would check for "projects:*#edit@john" and also "projects:projectXYZ#edit@john" if that failed

With that, I was also able to use an admin subject set to enable admin access to all resources

<@U02AYH087PY> thanks a lot for the response.