raystack / frontier / 38356170270

55%

main: 55%

Pull #1986

github

feat(authz): link custom resources to an organization in the generated schema

Every custom resource type gets an org relation, and each permission gains an org path that reads a new organization permission, org_<slug>. It holds only grants made on the organization, so tokens scoped to all projects of an organization do not reach resources it owns. org is now a reserved verb, and custom permission slugs are limited to 60 characters so the prefixed name fits SpiceDB's limit.

14 of 19 new or added lines in 2 files covered. (73.68%)

22705 of 41492 relevant lines covered (54.72%)

18.24 hits per line