traversing relations

[liamsalomonsson-co]

Hi,
I have been trying to get my head around how to model this scenario with no luck so far:

students have schedules
students have one or many guardians
students attend one to many schools
schools have one to many teachers
teachers can teach at multiple schools

students can edit their own schedule
guardians of the student can edit the students schedule
teachers can edit the schedules of all students that attend a school that the teacher teaches at

here is my attempt so far but i keep getting stuck on the part where teachers should be able to edit the schedule since there is no direct relation there.

model
schema 1.1

type user
relations
define guardians: [user]
define attends: [school]

type school
relations
define teachers: [user]

type schedule
relations
define owner: [user]
define can_edit: owner or guardians from owner or ?????

[dyeam0]

Hi @liamsalomonsson-co, we'll get someone to take a look and try to give you some help.

[dyeam0]

Hi @liamsalomonsson-co, I have an example model and tuples and tests that pass (.fga.yaml file attached).

model
  schema 1.1

# Liam's School Schedule Authorization Model 

type user
  relations
    # Students have guardians who can act on their behalf
    define guardians: [user]

type school
  relations
    # Schools have teachers (many-to-many relationship)
    define teachers: [user]
    # Students who attend this school
    define students: [user]

type schedule
  relations
    # The student who owns this schedule
    define owner: [user]
    
    # Link to schools where the schedule owner is a student
    # This enables TTU traversal: schedule -> school -> teachers
    define school: [school]
    
    # Authorization: who can edit the schedule
    define can_edit: owner or guardians from owner or teachers from school

liam-school-test-improved.fga.yaml

Hope this helps you continue your modeling. Full disclosure, I used the OpenFGA Modeling MCP Server to help me model this.

[liamsalomonsson-co]

thank you. this will work.