feat(abac): update Write API to include a condition per tuple (#95)

openfga · Sep 15, 2023 · 2b2e5ac · 2b2e5ac
1 parent aa7d2ff
commit 2b2e5ac
Show file tree

Hide file tree

Showing 4 changed files with 2,159 additions and 1,820 deletions.
diff --git a/docs/openapiv2/apidocs.swagger.json b/docs/openapiv2/apidocs.swagger.json
diff --git a/openfga/v1/openfga_service.proto b/openfga/v1/openfga_service.proto
@@ -857,6 +857,40 @@ message ReadResponse {
   ];
 }
 
+message WriteRequestTupleKey {
+  string user = 1 [
+    (validate.rules).string = {max_bytes: 512},
+    (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {
+      max_length: 512,
+      example: "\"user:anne\""
+    }
+  ];
+
+  string relation = 2 [
+    (validate.rules).string = {
+      pattern: "^[^:#@\\s]{1,50}$",
+      ignore_empty: true
+    },
+    (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {
+      max_length: 50,
+      example: "\"reader\""
+    }
+  ];
+
+  string object = 3 [
+    (validate.rules).string = {
+      pattern: "^[^\\s]{2,256}$",
+      ignore_empty: true
+    },
+    (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {
+      max_length: 256,
+      example: "\"document:2021-budget\""
+    }
+  ];
+
+  RelationshipCondition condition = 4;
+}
+
 message WriteRequest {
   string store_id = 1 [
     json_name = "store_id",
@@ -865,9 +899,9 @@ message WriteRequest {
     (grpc.gateway.protoc_gen_openapiv2.options.openapiv2_field) = {example: "\"01YCP46JKYM8FJCQ37NMBYHE5X\""}
   ];
 
-  openfga.v1.TupleKeys writes = 2;
+  repeated WriteRequestTupleKey writes = 2;
 
-  openfga.v1.TupleKeys deletes = 3;
+  repeated WriteRequestTupleKey deletes = 3;
 
   string authorization_model_id = 4 [
     json_name = "authorization_model_id",