RBAC on contains hierarchies via paths-refs
Example:
```clojure
(entity :Employee
{:Id {:type :Int :id true}
:Email :Email
...)
(entity :Warehouse
{:Manager :Path ;; emplyee.path
...)
(entity :Product
...)
(relationship :WarehouseProduct
{:meta {:contains [:Warehouse :Product]}
:rbac [{:role :Warehouse.Manager.Email :allow :*}]})
```
The `rbac` on `:WarehouseProduct` means, an employee that becomes a warehouse-manager will be automatically added to a `role` with permissions required to create instances of `:Product` under that specific warehouse.
0 条评论