Merge pull request #140 from holaplex/mpw/keto-namespace-update

remove recursion and traverse in Organization Namespace, add explicit…

Author: mpwsh

charts/hub-permissions/Chart.yaml

@@ -18,7 +18,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.4.4
+version: 0.4.5
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/hub-permissions/policies/namespaces.keto.ts

@@ -205,20 +205,18 @@ class Organization implements Namespace {
     owners: User[]
     editors: User[]
     viewers: User[]
-    parents: Organization[]
   }
 
   permits = {
     view: (ctx: Context): boolean =>
       this.related.viewers.includes(ctx.subject) ||
+      this.related.owners.includes(ctx.subject) ||
       this.permits.edit(ctx),
     edit: (ctx: Context): boolean =>
       this.related.editors.includes(ctx.subject) ||
-      this.permits.delete(ctx),
-    invite: (ctx: Context): boolean =>
-      this.permits.view(ctx),
-    delete: (ctx: Context): boolean =>
       this.related.owners.includes(ctx.subject) ||
-      this.related.parents.traverse((parent) => parent.permits.delete(ctx)),
+      this.permits.delete(ctx),
+    invite: (ctx: Context): boolean => this.permits.view(ctx),
+    delete: (ctx: Context): boolean => this.related.owners.includes(ctx.subject),
   }
 }