Grant inheritance in rbac

A system comprising:

• a memory;
• and
• a processing device operatively coupled to the memory, the processing device to:
• generate an inherited grant that specifies a permission on a first type of object in a container and a grant of the permission to a role;
• attach the inherited grant to the container, wherein the container includes a set of objects of the first type;
• in response to a first object of the set of objects being referenced via the role, create a virtual implied grant based on the inherited grant;
• and
• authorize utilization of the permission on the first object using the virtual implied grant, wherein the virtual implied grant is transient and exists in-memory only for the purpose of authorizing the utilization of the permission on the first object.

A non-transitory computer-readable medium having instructions stored thereon which, when executed by a processing device, cause the processing device to:

• generate an inherited grant that specifies a permission on a first type of object in a container and a grant of the permission to a role;
• attach the inherited grant to the container, wherein the container includes a set of objects of the first type;
• in response to a first object of the set of objects being referenced via the role, create, by the processing device, a virtual implied grant based on the inherited grant;
• and
• authorize utilization of the permission on the first object using the virtual implied grant, wherein the virtual implied grant is transient and exists in-memory only for the purpose of authorizing the utilization of the permission on the first object.