AZ208: A relation nothing uses

No permission, rule, test or invariant uses this relation. It is often a typo in a second source of the same relation, or a permission not written yet. Use it, or remove it.

Reported when the policy is compiled: rowfence check, the editor, rowfence dev.

The mistake

app role app_user
type user = app.users
type folder = app.folders
  owner  : user = owner_id
  editor : user = editor_id
  can view = owner

line 5: folder.editor is declared but nothing uses it (no permission, rule, test or group refers to it): remove it, or if it is another source of an existing relation, give it that relation's name [AZ208]

Fixed

app role app_user
type user = app.users
type folder = app.folders
  owner  : user = owner_id
  editor : user = editor_id
  can view = owner or editor