Casbin Forum runs on Casnode, the open-source Discourse-style forum. Try the Casnode demo →
Casbin Forum

Hello guys,

I’m having a hard time understanding how inheritance works when assigning a sub-role to another role.

For example, if I add admin to normal_role_a, who inherits from whom?
Does admin get the permissions of normal_role_a, or does normal_role_a get the permissions of admin?

From my understanding, I would expect that the admin inherits the permissions of normal_role_a.

However, things get more confusing when domains are involved. In order to make requests work for a specific domain, I also have to assign that domain to the admin. It seems that having the domain already assigned to normal_role_a is not sufficient.

Could someone clarify how inheritance works in combination with domains?