chr1s

I tried Enforce(user1, folder_create, group1) and the result is false.
How do I modify my policy so that it'll return true ?

Hi,
I'm trying the hierarchical RBAC and here's my policy:

g, group_owner, group_read
g, group_owner, group_write
g, group_owner, project_create
g, project_owner, project_read
g, project_owner, project_write
g, project_owner, folder_create
g, folder_owner, folder_read
g, folder_owner, folder_write
g, folder_reviewer, folder_read
g, group_owner, project_owner
g, group_owner, folder_owner

g2, group1, projectA
g2, group1, projectB
g2, group1, folder1
g2, group1, folder2
g2, group1, folder3

p, user1, group_owner, group1

Is there any existing API so that I can verify user1 has the folder_create permission ?
I've tried HasPermissionForUser(user1, folder_create) and HasRoleForUser(user1, group_owner but they both return false