@spec authzed_can(atom() | String.t(), keyword()) :: {module(), keyword()}

Alias for rebac_can/2.

@spec authzed_can_assign(atom(), keyword()) :: {module(), keyword()}

Alias for rebac_can_assign/2.

@spec rebac_can(atom() | String.t(), keyword()) :: {module(), keyword()}

Checks if the actor has permission on the resource in Licet / SpiceDB. Works for both read queries (via lookup_resources) and single-record mutations.

@spec rebac_can_assign(atom(), keyword()) :: {module(), keyword()}

Checks if the actor has permission to assign the incoming value of attribute on target (:on).

For example, rebac_can_assign(:role, on: "platform:main") checks platform:main#assign_<new_role>@user:<actor_id>.