fga-contract.md

FGA Contract — Project Service

This document is the authoritative reference for all messages the project service sends to the fga-sync service, which writes and deletes OpenFGA relationship tuples to enforce access control.

The full OpenFGA type definitions (relations, schema) for all object types are defined in the platform model.

Update this document in the same PR as any change to FGA message construction.

---

Object Types

• Project

---

Message Format

All messages use the generic FGA message format on the following NATS subjects:

Subject	Used for
lfx.fga-sync.update_access	Create and update operations
lfx.fga-sync.delete_access	Delete operations

Each message carries object_type, operation, and a data map. The sections below describe the data contents for each object type.

---

Project

Source structs: internal/domain/models/project.go — ProjectBase and ProjectSettings

Synced on: create, update of project base, update of project settings, delete of a project.

Access Config

Field	Value
object_type	project
public	ProjectBase.Public (passed through directly)

Relations

Relation	Value	Condition
writer	Usernames from ProjectSettings.Writers	Only when Writers is non-empty
auditor	Usernames from ProjectSettings.Auditors	Only when Auditors is non-empty
meeting_coordinator	Usernames from ProjectSettings.MeetingCoordinators	Only when MeetingCoordinators is non-empty

Usernames are the Username field of each UserInfo entry (Auth0 sub values).

References

Reference	Value	Condition
parent	"project:{ParentUID}"	Only when ProjectBase.ParentUID is non-empty

Delete

On delete, only uid is sent — all FGA tuples for project:{uid} are removed by the fga-sync service.

---

Triggers

Operation	Object Type	Subject	Notes
Create project	project	lfx.fga-sync.update_access	Always sent
Update project base	project	lfx.fga-sync.update_access	Always sent
Update project settings	project	lfx.fga-sync.update_access	Always sent
Delete project	project	lfx.fga-sync.delete_access	Always sent