애플리케이션(RP) 관리 기능 구현 및 Ory Keto 권한 연동

docker/ory/keto/namespaces.ts

@@ -2,6 +2,18 @@ import { Namespace, Subject, Context, SubjectSet } from "@ory/keto-definitions"
 
 class User implements Namespace {}
 
+class UserGroup implements Namespace {
+  related: {
+    members: User[]
+    parent_tenant: Tenant[]
+  }
+
+  permits = {
+    check_member: (ctx: Context): boolean =>
+      this.related.members.includes(ctx.subject)
+  }
+}
+
 class Tenant implements Namespace {
   related: {
     admins: User[]
@@ -26,7 +38,7 @@ class Tenant implements Namespace {
 
 class RelyingParty implements Namespace {
   related: {
-    owners: User[]
+    owners: (User | SubjectSet<UserGroup, "members">)[]
     parent_tenant: Tenant[]
   }
 
@@ -50,4 +62,4 @@ class System implements Namespace {
     manage_all: (ctx: Context): boolean =>
       this.related.super_admins.includes(ctx.subject)
   }
-}
+}