...
- Users A, B and C join team T.
- At this point, users A, B, C have authorisation
<NAMESPACE>:group:T
(in the sense of G002)
- At this point, users A, B, C have authorisation
- Team T joins groups X, Y
- At this point, users A, B, C have authorisation
<NAMESPACE>:group:T
and<NAMESPACE>:group:X:T
and<NAMESPACE>:group:Y:T
- At this point, users A, B, C have authorisation
- User C leaves T
- At this point, users A, B have authorisation
<NAMESPACE>:group:T
and<NAMESPACE>:group:X:T
and<NAMESPACE>:group:Y:T
- At this point, user C has authorisation
<NAMESPACE>:group:X
or<NAMESPACE>:group:Y
only if they have it by independent means (not through T)
- At this point, users A, B have authorisation
- T leaves Y and joins W
- At this point, users A, B have authorisation
<NAMESPACE>:group:X:T
and<NAMESPACE>:group:W:T
in addition to<NAMESPACE>:group:T
- At this point, users A, B have authorisation
- User D joins T
- At this point, users A, B, D have authorisation as in point 4
...