{"action":"created","issue":{"url":"https://api.github.com/repos/acciente/oacc-core/issues/25","labels_url":"https://api.github.com/repos/acciente/oacc-core/issues/25/labels{/name}","comments_url":"https://api.github.com/repos/acciente/oacc-core/issues/25/comments","events_url":"https://api.github.com/repos/acciente/oacc-core/issues/25/events","html_url":"https://github.com/acciente/oacc-core/issues/25","id":127609018,"number":25,"title":"Inheritance for permission targets?","user":{"login":"manosbatsis","id":3016927,"avatar_url":"https://avatars.githubusercontent.com/u/3016927?v=3","gravatar_id":"","url":"https://api.github.com/users/manosbatsis","html_url":"https://github.com/manosbatsis","followers_url":"https://api.github.com/users/manosbatsis/followers","following_url":"https://api.github.com/users/manosbatsis/following{/other_user}","gists_url":"https://api.github.com/users/manosbatsis/gists{/gist_id}","starred_url":"https://api.github.com/users/manosbatsis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/manosbatsis/subscriptions","organizations_url":"https://api.github.com/users/manosbatsis/orgs","repos_url":"https://api.github.com/users/manosbatsis/repos","events_url":"https://api.github.com/users/manosbatsis/events{/privacy}","received_events_url":"https://api.github.com/users/manosbatsis/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/acciente/oacc-core/labels/question","name":"question","color":"cc317c"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-01-20T05:42:34Z","updated_at":"2016-01-21T00:08:18Z","closed_at":"2016-01-21T00:08:18Z","body":"This is more of a question than an issue.\r\n\r\nConsider an app where a user dynamically (i.e. at runtime) defines a \"role\" as a oacc resource with permissions for a specific target resource. The scope of such a role would be limited in something like a user-defined workflow. My understanding is that \"user\" resources can then be given the INHERIT built-in permission on the \"role\" to inherit permissions assigned to it. Assuming that is correct:\r\n\r\na) is it possible to similarly apply some concept of inheritance to resources used as permission targets under the same scope without actually creating copies of the original permissions? Are resource classes or domains relevant here?\r\nb) would it be possible to implement custom business logic that allows resources to inherit different permission targets as described above during their lifecycle (i.e. based on some status or whatnot)?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/acciente/oacc-core/issues/comments/173408388","html_url":"https://github.com/acciente/oacc-core/issues/25#issuecomment-173408388","issue_url":"https://api.github.com/repos/acciente/oacc-core/issues/25","id":173408388,"user":{"login":"manosbatsis","id":3016927,"avatar_url":"https://avatars.githubusercontent.com/u/3016927?v=3","gravatar_id":"","url":"https://api.github.com/users/manosbatsis","html_url":"https://github.com/manosbatsis","followers_url":"https://api.github.com/users/manosbatsis/followers","following_url":"https://api.github.com/users/manosbatsis/following{/other_user}","gists_url":"https://api.github.com/users/manosbatsis/gists{/gist_id}","starred_url":"https://api.github.com/users/manosbatsis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/manosbatsis/subscriptions","organizations_url":"https://api.github.com/users/manosbatsis/orgs","repos_url":"https://api.github.com/users/manosbatsis/repos","events_url":"https://api.github.com/users/manosbatsis/events{/privacy}","received_events_url":"https://api.github.com/users/manosbatsis/received_events","type":"User","site_admin":false},"created_at":"2016-01-21T00:08:18Z","updated_at":"2016-01-21T00:08:18Z","body":"Thanks for the helpful reply Fabian. Switching over to the discussion group [1] as it's probably more appropriate. .\r\n\r\n[1] https://groups.google.com/forum/#!topic/oacc-users/DGHN1ceDAUg"}}