Add filterable metadata to permissions

[davidbanham]

No description provided.

[nwinch]

I understand the idea, though I'm concerned that metadata will be easily abused - especially with projects like Ordermentum in mind.

Can you provide some examples of what the range of metadata might be like?

[davidbanham]

The metadata would be arbitrary key value pairs. In the case of Ordermentum it would be things like:

type: 'customer'
entity: 'x'
metadata:
  priceGroup: 'foo'
  visibilityGroup: 'bar'

In the case of something like Kredible they might be:

type: 'bandMember'
entity: 'y'
metadata:
  instrument: 'bassoon'

Another point Simon has raised is that in a world where permissions have metadata we would need to deal with the idea of those being mutable. In the world where permissions are just tuples, they can be immutable.