diff --git a/stores/gdrive/store.fga.yaml b/stores/gdrive/store.fga.yaml index 1d28f63..175d32b 100644 --- a/stores/gdrive/store.fga.yaml +++ b/stores/gdrive/store.fga.yaml @@ -54,3 +54,40 @@ tests: object: doc:2021-roadmap assertions: can_read: true + + - name: Check if the right users have access to the right documents + list_users: + - object: doc:public-roadmap + user_filter: + - type: user + assertions: + viewer: + users: + - user:* + + - object: doc:2021-roadmap + user_filter: + - type: user + assertions: + viewer: + users: + - user:beth + + - object: folder:product-2021 + user_filter: + - type: group + relation: member + assertions: + viewer: + users: + - group:fabrikam#member + + - object: folder:product-2021 + user_filter: + - type: user + assertions: + viewer: + users: + - user:anne + - user:charles + diff --git a/stores/github/store.fga.yaml b/stores/github/store.fga.yaml index 48094aa..f30c048 100644 --- a/stores/github/store.fga.yaml +++ b/stores/github/store.fga.yaml @@ -63,3 +63,27 @@ tests: object: repo:openfga/openfga assertions: reader: true + + - name: Check if the right users have access to the right repositories + list_users: + - object: repo:openfga/openfga + user_filter: + - type: user + assertions: + writer: + users: + - user:charles + - user:beth + - user:diane + - user:erik + + - object: repo:openfga/openfga + user_filter: + - type: team + relation: member + assertions: + writer: + users: + - team:openfga/backend#member + - team:openfga/core#member +