Check collection in ABAC with policy

[resah]

Hi, I am using ABAC with policy and wanted to check, if the user has a necessary claim for a resource property. Something like

p, r.obj.Group in r.sub.Claims, create
p, r.obj.Group in r.sub.Claims && r.sub.Name == r.obj.CreatedBy, delete

Is this possible? Should r.sub.Claims then be an array, enumerable, list, ...?

[casbin-bot]

@sagilio @sociometry @AsakusaRinne

[Yang Luo]

@sagilio

[Sagilio]

@resah It will work, and the r.sub.Claims should be an IEnumerable at least.