Skip to content

Commit b72764d

Browse files
bramweltclaude
andcommitted
Add missing relations to vote_response FGA type
Add project, writer, and viewer relations to vote_response to match what the voting-service sends via lfx.fga-sync.update_access. These missing relations caused 2,658 failed batch writes per 24h. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Issue: LFXV2-1554 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Signed-off-by: Trevor Bramwell <tbramwell@linuxfoundation.org>
1 parent 39225ab commit b72764d

1 file changed

Lines changed: 3 additions & 2 deletions

File tree

charts/lfx-platform/templates/openfga/model.yaml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -307,11 +307,12 @@ spec:
307307
type vote_response
308308
relations
309309
define vote: [vote]
310+
define project: [project]
310311
# owner is the user who cast this response
311312
define owner: [user]
312-
# we don't need to create a "writer" relation that is defined as just "owner":
313-
# we just use the "owner" relation in our access checks!
313+
define writer: [user] or owner
314314
define auditor: owner or auditor from vote
315+
define viewer: [user:*, user] or auditor
315316
316317
type survey
317318
relations

0 commit comments

Comments
 (0)