-
I think the title is self explanatory. I envision this feature as having configmap for the schema and the initial dataset and pointing the operator to them. The operator would then load the scripts in…
-
## The Problem Statement
As the developer of an authorization service that uses SpiceDB as its backing store, for regulatory reasons, I need to have an audit log that shows what relationships were pr…
-
## Background
Schema in SpiceDB is written as a single unit via the `WriteSchema` call. This is an important requirement for type checking and validation, but comes with a cost of making it harder …
-
Found that connecting with a server with a server stream it keeps disconnecting.
We where trying to connect with the Watch request in spicedb but usually we get auto disconnected.
Also tried the…
-
Strategies
* [ ] password-based
* [ ] magic email link
* [ ] oauth
* [ ] saml
* [ ] jwt
* [ ] 2fa (app, hardware-based)
* [ ] support common providers? (google?)
* [ ] password reset
Rela…
-
We have started implementing a permission system using spicedb, but we are tackling with the following theoretical question. Suppose we have documents and users. The documents are organized in folders…
-
`cobrautil/v2` async logger was introduced in https://github.com/authzed/spicedb/pull/844 and then disabled in https://github.com/authzed/spicedb/pull/888. Currently there is no means to prevent log f…
-
### What platforms are affected?
linux, macos, windows
### What architectures are affected?
amd64, arm64
### Steps to Reproduce
1. Run SpiceDB with tracing enabled
2. View tracing names and obse…
-
With the caveats implementation now available, we have the option to support TTL on relationships by doing something like follows:
```
caveat is_not_expired(current_time timestamp, expiration ti…
-
Security Criteria
* Transport
* Support TLS out of the gate
* across actuator, rsocket, webflux/gateway
* Third party apps like Consul, Cassandra, Elastic
* WHY? Can I terminate TLS co…