How to grant permissions to all resources of a type?

[Icantjuddle]

I want to be able to give a group of users permissions to view all resources of a type. Is that possible to do? It seems wildcards cannot be used on the subject side of a relationship?

I could do it with a layer of indirection but it seems rather gross:

definition user {}
definition team { relation member: user }

definition my_domain_parent {
  relation domain_reader: user | team#member;
  relation domain_writer: user | team#member;
  permission view = domain_reader;
  permission edit = domain_writer;
}
definition my_domain {
  relation parent: my_domain_parent;
  relation reader: user | team#member;
  relation writer: user | team#member;

  permission view: reader + my_domain_parent->view;
  permission edit: writer + my_domain_parent->edit;
}

This gets very redundant as I increase the number of domains and they have to match up properly.
What I'd like to be able to do is:

brokerage:*#reader@team:MY_TEAM#member

Are there ways to make this more ergonomic?

[josephschorr]

The above approach is the correct one; you can define a type call definition all_of_type and have the ID be the resource type, but it will have to match your current layout. Resource wildcards are not supported and almost certainly won't be - it would introduce massive performance issues