[QUESTION] - How Would I make queries for different scenarios

[sujit-baniya]

I've been using this adapter on Postgres. Curently I'm stuck on getting some information from Casbin. Please help me understand how could I query to get those information.

I'm trying to look for

1. If the domain is *, get all users associated to all domains with their respective roles
2. get all users associated to a domain with their respective roles

So I have basically added three roles: admin, account-admin, and user
admin => with all powers
account-admin => with all powers for account (domain)
user => normal users

And Admin would see all users irrespective of domains, Account Admin would see all users associated with the domain.

Currently I needed to make custom queries to fetch such information. Any help would be highly appreciated.

[hsluoyz]

@sujit-baniya plz use: https://casbin.org/docs/en/rbac-with-domains

It's not a gorm-adapter issue I think.

[sujit-baniya]

@hsluoyz Thanks for your response. I added the extra matcher parameter but still I don't see any effect. Need to check more.

[request_definition]
r = sub, dom, obj, act

[policy_definition]
p = sub, dom, obj, act

[role_definition]
g = _, _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub, r.dom) && r.dom == p.dom && r.obj == p.obj && r.act == p.act || r.sub == root

[hsluoyz]

@sujit-baniya see: https://casbin.org/docs/en/rbac#use-pattern-matching-in-rbac

[sujit-baniya]

@hsluoyz Thanks again :). I tried and now I could get all Domains associated with the Admin account using following Model.

[request_definition]
r = sub, dom, obj, act

[policy_definition]
p = sub, dom, obj, act

[role_definition]
g = _, _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub, r.dom) && keyMatch2(r.dom, p.dom) && r.obj == p.obj && r.act == p.act

Still casbin is not providing any API for getting all users for a Domain. Creating one issue on Casbin.

[sujit-baniya]

@hsluoyz Here, casbin/casbin#782

[sujit-baniya]

Also can you please suggest which storage would be best for high performance: CSV vs POstgres

[hsluoyz]

@sujit-baniya DB adapter is better for production use.

Closed here.