[feature] ReBAC: The [role_definition] doesn't support a 4th component (but Go version does!)

[pi-nuts]

I adapted the official ReBAC example by adding a fourth component to the role_definition (g).
Surprisingly, when trying it in the online editor, it works when using Go engine, but not when using jCasbin engine:

Also, there is no error message informing the user, that this is not supported - instead it just returns false for every request.
This made it tedious to find out, what the problem is, as the documentation also does not state this limitation directly.

Is this merely a bug in the Java implementation, or is it simply not yet imlemented in Java?

Note: When running the same example with node and rust engines, there are (misleading) error messages:
Rust:

Node:

[D0000M]

its a bug in the Java implementation. (#458) g doesn't support more than 3 components—the fourth element has no effect. In your example, you’ll notice that both alice, doc1, delete, org1 and alice, doc1, delete, org2 return true.

I believe https://editor.casbin.org/#HZRDCWBTY will be helpful for you.

Model

[request_definition]
r = sub, dom, obj, act

[policy_definition]
p = sub, dom, obj, act

[role_definition]
g = _, _, _
g2 = _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub, r.dom) && r.dom == p.dom && g2(r.obj, p.obj) && r.act == p.act

Policy

p, owner, org1, doc, delete
p, owner, org2, doc, delete

g, alice, owner, org1
g, bob, owner, org2

g2, doc1, doc
g2, doc2, doc

Request

alice, org1, doc1, delete
alice, org2, doc1, delete
bob, org1, doc2, delete
bob, org2, doc2, delete

[github-actions]

🎉 This issue has been resolved in version 1.84.0 🎉

The release is available on:

• GitHub release
• v1.84.0

Your semantic-release bot 📦🚀