model
schema 1.1
type user
type global
relations
define admin: [user]
define agent: [user]
type client
relations
define admin: [user] or admin from parent
define agent: [user]
define auditor: [user]
define can_crud_entities: admin
define can_crud_rbac: admin or manager
define can_ru_rbac: manager
define can_view_rbac: admin or manager or auditor
define manager: [user]
define parent: [global]
type parking
relations
define admin: [user] or admin from parent
define agent: [user] or agent from parent or admin or manager
define auditor: [user] or auditor from parent
define can_crud_cases: admin or manager or agent
define can_crud_entities: admin
define can_crud_rbac: admin or manager
define can_ru_rbac: manager
define can_view_cases: admin or manager or agent or auditor
define can_view_entities: admin or manager or agent or auditor
define can_view_rbac: admin or manager or auditor
define manager: [user] or manager from parent
define parent: [client]
type case
relations
define agent: [user] or agent from parent
define assigned_to: [user] or agent
define can_crud_cases: creator or admin from parent or manager from parent or agent from parent or assigned_to
define can_view_cases: creator or assigned_to or admin from parent or manager from parent or agent from parent or auditor from parent
define creator: [user]
define parent: [parking]
type call
relations
define agent: [user] or agent from parent
define assigned_to: [user] or agent
define can_crud_call: creator or admin from parent or manager from parent or agent from parent or assigned_to or admin from global_parent
define can_view_call: creator or assigned_to or admin from parent or manager from parent or agent from parent or auditor from parent or admin from global_parent
define creator: [user]
define global_parent: [global]
define parent: [parking]