[keycloak-user] Advanced authorization

[Melissa Palmer]

Hi,

I am trying to do something similar to the following:
- have a resource (say album) in app-authz-uma-photoz quickstart that
includes a status attribute against it.
- status such as: CREATED, APPROVED, DECLINED,
- a person can then be given a role that allows for permissions (via a
role) such as

   - album:create
   - album:approve
   - album:decline

- BUT a person is not allowed to approve any albums they created themselves

Is there a keycloak-quickstarts/example I can start from?
Or a recommended way I should attempt to tackle this?

Thank You in advance,
Melissa