I’m looking for some help to set up policies on an app. Despite trying a few times and mastering the rest of Cake, I never get to where I want. Here’s an example of what I am trying to do.
I would summarize my main issue as applying a policy from one model to another that is connected to it. For example here, a user is part of an org(anization). Orgs have teams, to whom some users of the org belong, and teams have blocks. Because a user is part of the org, that user will have some permissions on all of the org’s teams, but “greater” permissions if that user is part of that team. And likewise if they belong to a block.
Have the following tables
Orgs
-id
Teams
-id
-org_id
Users
-id
Blocks
-id
-team_id
UsersOrgs
-id
-user_id
-org_id
-status
UsersTeams
-id
-user_id
-team_id
-status
UsersBlocks
-id
-user_id
-block_id
Admins
-id
-user_id
Examples of rules
-Users associated with the block can edit it.
-Users who belong to the same team as a block AND have a status higher than X can delete it
-Users who belong to the same org as the team associated with the block can view it.
-Users who belong to the same org can view a list of the blocks.
-Users who belong to the same org can view a block that belongs to one of the org’s teams.
-Users who are admin can do everything, no matter the org or the team