module Conjur::Policy::Types
  class Give < Base
    attribute :resource, kind: :resource
    attribute :owner, kind: :role

    self.description = %(
Give ownership of a resource to a [Role](#reference/role).
    
When the owner role performs a permission check on an owned resource, the
result is always `true`.

[More](/key_concepts/rbac.html) on role-based access control in Conjur.
)

    self.example = %(
- !user Link
- !secret song-of-storms

- !give
    resource: !secret song-of-storms
    owner: !user Link
)

    def to_s
      "Give #{resource} to #{owner}"
    end
  end
end