How is permission introspection on something like this? So not just "does user x have this permission on object y" but "why does user x have permission this permission on user y?". For something like cascading folder permission insight and etc...
The information you are describing can be retrieved via the Expand API [0], which returns a tree containing all of the relationships that are reachable from a permission, as well as how they were reached.
For example, if you have a schema with a permission like so:
definition resource {
relation parent: resource
relation writer: user
relation reader: user
permission view = reader + writer + parent->view
}
[0]: https://buf.build/authzed/api/docs/main/authzed.api.v1#Expan...