There are times where we might want to disable a given permission for all actors and objects... for example, when a permission is a feature flag and that flag is removed, it would be nice to bulk remove it by the action.
I'm picturing an Accessly::Permissions::BulkRevoke object that would be used for cases like this... and it would remove all records for a given policy/ action (maybe we could optionally scope by segment as well?)
Maybe the api would be calling #revoke_all! on the policy class similar to how we have #revoke!?
There are times where we might want to disable a given permission for all actors and objects... for example, when a permission is a feature flag and that flag is removed, it would be nice to bulk remove it by the action.
I'm picturing an
Accessly::Permissions::BulkRevokeobject that would be used for cases like this... and it would remove all records for a given policy/ action (maybe we could optionally scope by segment as well?)Maybe the api would be calling
#revoke_all!on the policy class similar to how we have#revoke!?