package permission

import data.role_permissions

default allow := false

allow if {
    some role in input.subject.roles
    some permission in role_permissions[role]
    permission.action == input.action
    permission.object == input.object
}
