support user role authority resource model about casbin HOT 4 CLOSED

Casbin supports RBAC model with role hierarchy. You can view 1st level roles as role and 2nd level roles as authority.

The examples for a web service are here: https://github.com/casbin/casbin#others. Pay more attention to the Intel RMD example and their policy rules.

from casbin.

sorry,i still don't know how does casbin work with user role authority resource model,could you give an example?

from casbin.

The basic RBAC model works with your scenario. You can see the model file and policy file in the above link. The content of the model file is:

[request_definition]
r = sub, obj, act

[policy_definition]
p = sub, obj, act

[role_definition]
g = _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub) && r.obj == p.obj && r.act == p.act

The policy file can be:

p, authority1, resource1, read
p, authority2, resource2, read
p, authority2, resource2, write

g, alice, role1
g, bob, role2

g, role1, authority1
g, role2, authority2

This policy means:

alice -> role1 -> authority1 -> resource1
bob-> role2 -> authority2 -> resource2

from casbin.

Suppose it has been solved.

from casbin.