authzed / spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
https://authzed.com/docs
Apache License 2.0
4.99k stars 267 forks source link

Improvements around usage of CEL #1883

Closed josephschorr closed 5 months ago

josephschorr commented 5 months ago

Upgrades CEL to get structured errors out, allowing us to rewrite the location information on the errors instead of using the synthesized whitespace hack

ecordell commented 5 months ago

Haven't reviewed yet, but the CEL fork is needed for now - just update the fork if you want to update CEL.

Kube also imports CEL but at an older version, and the APIs changed backwards incompatibly. The fork is how we keep spicedb importable in spicedb-kubeapi-proxy. So not really a fork, it's a mirror.

josephschorr commented 5 months ago

Ah... nertz. Okay, I'll update the mirror tomorrow and then update the commit to still move to the latest version. I'll also add a note in the code