Discord permissions system example #145
Conversation
|
A general suggestion: Use CLI like other examples (document cloud and github). |
|
Thanks for your suggestions! |
| Permission::"SendMessage" Permission::"KickMember" | ||
| ▲ ▲ ▲ | ||
| │ └───────────────────┐ │ | ||
| │ │ │ | ||
| Role::"everyone" Role::"admin" | ||
| ▲ ▲ | ||
| │ │ | ||
| User::"yihong" User::"oflatt" |
There was a problem hiding this comment.
IIUC Discord correctly, a role is assigned permissions for a particular channel. So I don't see how it makes sense for the hierarchy to just relate Role to Permission.
I would think you need to set it up so that you have Channel resource, and that when the operator assigns permissions to a channel for a role, you basically create an ad hoc policy that expresses those permissions.
You also seem to be missing the concepts of Category for channels (which can be "synced" or not), and the fact that permissions can apply to all channels (server wide). I would think you need a Server object which channels are in.
There was a problem hiding this comment.
Great ideas!
I suggest that we merge this PR without channels (I'll re-name Channel to Server for now)
I'll submit a follow-up PR that introduces channels, and another for categories.
oflatt
force-pushed
the
oflatt-discord-example
branch
from
b61c244
to
e3b7602
Compare
Signed-off-by: oflatt <oflatt@gmail.com> convert json to natural Signed-off-by: Oliver Flatt <oflatt@gmail.com> inline schema Signed-off-by: Oliver Flatt <oflatt@gmail.com> refer to cedar 4.0 (oops) Signed-off-by: Oliver Flatt <oflatt@gmail.com> discord example first try Signed-off-by: Oliver Flatt <oflatt@gmail.com> move to examples folder Signed-off-by: Oliver Flatt <oflatt@gmail.com> working on using existing infra Signed-off-by: Oliver Flatt <oflatt@gmail.com> more progress on entities.json Signed-off-by: Oliver Flatt <oflatt@gmail.com> working on simple examples Signed-off-by: Oliver Flatt <oflatt@gmail.com> remove old rust code Signed-off-by: Oliver Flatt <oflatt@gmail.com> some comment fixes Signed-off-by: Oliver Flatt <oflatt@gmail.com> simplify slightly Signed-off-by: Oliver Flatt <oflatt@gmail.com> make manage role Signed-off-by: Oliver Flatt <oflatt@gmail.com> a couple examples of managing roles Signed-off-by: Oliver Flatt <oflatt@gmail.com> better readme Signed-off-by: Oliver Flatt <oflatt@gmail.com> replace channels with a single server for now Signed-off-by: Oliver Flatt <oflatt@gmail.com> add note in readme Signed-off-by: Oliver Flatt <oflatt@gmail.com>
oflatt
force-pushed
the
oflatt-discord-example
branch
from
e3b7602
to
c01ec20
Compare
Signed-off-by: oflatt <oflatt@gmail.com>
oflatt
force-pushed
the
oflatt-discord-example
branch
from
edfa851
to
3bda1a5
Compare
|
Marking as a draft for now- |
oflatt
changed the title
| when | ||
| { | ||
| // the user's channel matches the resource | ||
| (principal.channel == resource) && |
There was a problem hiding this comment.
This PR introduces a new example to the cedar repository, modeling some of the Discord permissions model.
See the README for more.