fix tuples

Author: adelowo

fga/model/automation/assessments.fga

@@ -85,7 +85,7 @@ type assessment_response
     # parent permissions derived based on `crud` permissions or parents
     define parent_editor: can_edit from parent
     define parent_viewer: can_view from parent
-    define parent: [assessment, campaign]
+    define parent: [assessment, campaign, entity]
 
 # campaign, similar to assessments, are viewable by organization admin+, by can_edit_campaign or inherited from the parent objects such as campaigns. They are not viewable by org members (view only) access by default
 type campaign

fga/tests/tests.yaml

@@ -1825,17 +1825,27 @@ tests:
           can_view: false
           can_edit: false
           can_delete: false
+      - user: user:ulid-of-owner
+        object: assessment_response:response-entity
+        assertions:
+          can_view: true
+          can_edit: true
+          can_delete: true
     list_objects:
       - user: user:ulid-response-owner
         type: assessment_response
+        context:
+          email_domain: "example.com"
         assertions:
           can_view:
             - assessment_response:response-1
+            - assessment_response:response-entity
       - user: user:ulid-of-owner
         type: assessment_response
         assertions:
           can_delete:
             - assessment_response:response-1
+            - assessment_response:response-entity
   - name: campaigns
     description: test campaign and campaign_target relationships with various parent types
     tuple_file: tuples/campaigns.yaml

fga/tests/tuples/assessment_responses.yaml

@@ -18,6 +18,13 @@
   relation: parent
   object: assessment_response:response-1
 
+- user: organization:openlane
+  relation: parent_context
+  object: entity:entity-1
+- user: entity:entity-1
+  relation: parent
+  object: assessment_response:response-entity
+
 # response owner
 - user: user:ulid-response-owner
   relation: response_owner