Casbin Forum runs on Casnode, the open-source Discourse-style forum. Try the Casnode demo →
Casbin Forum
AllTopicsRepliesLikes
RBAC with domains returns incorrect inherited permissions in editor but not in GoDec 2024
Casbin

Hi folks, investgiating the rbac with domains/tenants setup and am a little stumped with this here.

https://editor.casbin.org/#9GZ29E5LC

I have a pretty simple setup where I have augmented the templated example to include a reader role for tenant1 that only has read on data1. However, when I request to see that the user has permissions to delete, it says that it does and is inherited via the admin permission, when the user clearly does not have that permission.

Any ideas? I'm wondering if this is actually a bug in the editor or casbin node, because I am not able to replicate in Golang (which is what I'm using.)

Casnode
This forum runs on Casnode, an open-source forum with the look and features of Discourse, built with Go and Next.js. See what it can do on the Casnode demo site.
Try the Casnode demo