authzed / spicedb

Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications
https://authzed.com/docs
Apache License 2.0
4.71k stars 250 forks source link

Initial support for Intersection arrow #1937

Closed josephschorr closed 2 days ago

josephschorr commented 2 weeks ago

Adds support for intersection arrow and new syntax for existing arrows.

Existing arrow, two syntaxes:

permission view = folder->view
permission view = folder.any(view)

New syntax for intersection arrow:

permission view = folder.all(view)

The folder.all(view) syntax will ensure that a subject is found for view in all folders for the parent resource

Fixes #597

josephschorr commented 3 days ago

Updated