openfga / language

Grammar for the OpenFGA modeling language
https://openfga.dev
Apache License 2.0
17 stars 7 forks source link

Add test where `a from b` is directly assigned but contains `user:*` or `user#relation` errors out #327

Open d-jeffery opened 3 weeks ago

d-jeffery commented 3 weeks ago

Add a test that ensures that if b in the case of a from b is directly assigned but contains user:* or user#relation that we error out too.

e.g.

define parent: [folder:*]  
define viewer: viewer from parent  
define parent: [folder#parent]  
define viewer: viewer from parent  

Run against the current API and see if it properly validates against this case.

d-jeffery commented 3 weeks ago
model
  schema 1.1

type folder
  relations  
    define parent: [folder:*]  
    define viewer: viewer from parent

From the CLI:

{
  "is_valid":false,
  "error":"the relation type 'folder' on 'parent' in object type 'folder' is not valid"
}

Where as language only throws:

`parent` relation used inside from allows only direct relation.