<relation> Relation used inside from allows only direct relation with nested concentric relations

[lupeterm]

Hi all,

I was trying to get this (simplified for brevity) model to work:

type document
  relations
    define can_read: [user, user:*] or member from owns     <-- `owns` relation used inside from allows only direct relation.
    define owns: [org, club, team] or participant from project
    define project: [project]
    
type project
  relations
    define member: member from participant
    define participant: [org, club, team]

type {org, club, team}
  relations
    define member: [user]

As you can see, the project#members are concentrically filled with the respective members of project#participant.

Furthermore, document#owns is either directly populated with any of [org, club, team], or concentrically with the participants of document#project, which. is also any of [org, club, team].

Lastly, to determine the read access by either direct user relations or, per default, the concentric relation to the members of the [org, club, team] that own this document. Both should be of type [user], yet a ModelValidationError is thrown.

Why? Are concentric relations over multiple steps not allowed, or am I misunderstanding how the types are internally evaluated, i.e., what I think should be [user] is for some reason [org#user]?

Thanks in advance!

[lupeterm]

Ah, I see this was already referenced in openfga/openfga#2205.
Modifying my model as such has solved the problem:

[...]
    define can_read: [user, user:*] or member from owns or member from project     
    define owns: [org, club, team]
[...]

[dyeam0]

Hi @lupeterm. Based on openfga/openfga#2205, can we close your discussion as resolved? Thanks.

[lupeterm]

Yes! I just kept it open in case of additional ideas or remarks.