authzed / spicedb

Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications
https://authzed.com/docs
Apache License 2.0
4.71k stars 250 forks source link

Make sure to escape underscores in resource ID prefix matches in filters #1911

Closed josephschorr closed 1 month ago

josephschorr commented 1 month ago

Otherwise, it can make the query much slower and match unexpected relationships