Nested Permissions Policy Generation

One or more non-transitory computer readable media comprising instructions which, when executed by one or more hardware processors, cause performance of operations comprising:

• detecting a selection of a target action-artifact pair associated with a first entity;
• accessing permissions metadata in a target artifact of the target action-artifact pair to identify a first linked action-artifact pair associated with the target action-artifact pair based on a permission configuration rule stored in the permissions metadata;
• generating permissions policy data specifying the first entity, the target action-artifact pair, and the first linked action-artifact pair;
• analyzing the permissions metadata in a first linked artifact of the first linked action-artifact pair to determine whether a second linked action-artifact pair is associated with the first linked action-artifact pair based on a second permission configuration rule stored in the permissions metadata of the first linked artifact;
• responsive to determining that the second linked action-artifact pair is associated with the first linked action-artifact pair, updating the permissions policy data to include the second linked action-artifact pair;
• and
• storing a security policy for the first entity based on the permissions policy data, the security policy specifying permissions for the first entity to perform actions associated with the target action-artifact pair, the first linked action-artifact pair, and the second linked action-artifact pair.

A system comprising:

• at least one device including a hardware processor;
• the system being configured to perform operations comprising:
• detecting a selection of a target action-artifact pair associated with a first entity;
• accessing permissions metadata in a target artifact of the target action-artifact pair to identify a first linked action-artifact pair associated with the target action-artifact pair based on a permission configuration rule stored in the permissions metadata;
• generating permissions policy data specifying the first entity, the target action-artifact pair, and the first linked action-artifact pair;
• analyzing the permissions metadata in a first linked artifact of the first linked action-artifact pair to determine whether a second linked action-artifact pair is associated with the first linked action-artifact pair based on a second permission configuration rule stored in the permissions metadata of the first linked artifact;
• responsive to determining that the second linked action-artifact pair is associated with the first linked action-artifact pair, updating the permissions policy data to include the second linked action-artifact pair;
• and
• storing a security policy for the first entity based on the permissions policy data, the security policy specifying permissions for the first entity to perform actions associated with the target action-artifact pair, the first linked action-artifact pair, and the second linked action-artifact pair.