Relationship-based access control authorization model query generation

An apparatus for indexing permission relationships in a relationship-based authorization system, comprising:

• one or more memories storing processor-executable code;
• and
• one or more processors coupled with the one or more memories and individually or collectively operable to execute the processor-executable code to cause the apparatus to:
• receive, from a developer of the relationship-based authorization system, an authorization model from a data management system, the authorization model indicating a set of users and a set of objects;
• identify, via an identification system, a set of relations indicating relationships within the authorization model between the set of users and the set of objects, the set of relations corresponding to a set of relationship tuples, wherein a respective relationship tuple indicates an authorization level of a respective user for a respective object;
• and
• generate, via a message generation system, a set of data messages that are associated of the set of relationship tuples indicated within the authorization model, the set of data messages being generated to obtain a set of indices that indicate results of the set of data messages, wherein the set of indices are for authorizing access to data within the data management system.

A non-transitory computer-readable medium storing code for indexing permission relationships in a relationship-based authorization system, the code comprising instructions executable by one or more processors to:

• receive, from a developer of the relationship-based authorization system, an authorization model from a data management system, the authorization model indicating a set of users and a set of objects;
• identify, via an identification system, a set of relations indicating relationships within the authorization model between the set of users and the set of objects, the set of relations corresponding to a set of relationship tuples, wherein a respective relationship tuple indicates an authorization level of a respective user for a respective object;
• and
• generate, via a message generation system, a set of data messages that are associated of the set of relationship tuples indicated within the authorization model, the set of data messages being generated to obtain a set of indices that indicate results of the set of data messages, wherein the set of indices are for authorizing access to data within the data management system.