How do ContextualTuples work?

[keitherw]

Greetings,

I am a little confused about ContextualTuples. I have a check query that I have added a ContextualTuple with 'data' that does not exist within openFGA yet the query still passes.

My intent is only to allow the query if the user has can_access relation to the DocumentOne and their device, deviceid, is registered to mycompany.

type device
relations
define registered: [company]

example;

{"user":"user:UserName","relation":"can_access","object":"document:DocumentOne","contextual_tuples":[{"object":"device:deviceid","relation":"registered","user":"company:mycompany"}]}}

[keitherw]

I figured it out and have it working :)