Is there anyway to perform Authorization query like "What all permission a user/group (subject) has on a given resource type"

If there is any issue already open, I can take a look.

@Singha1 : https://github.com/authzed/spicedb/issues/613

that's similar

Yes this is exactly similar, is there any way to achieve this in current version, any recommendations? This is a must have for my use case, relationship tuple is not very high and relationship does not change very often.

issue a check for each permission in parallel

or each relation

or, alternatively, define a permission that includes them all

and issue an Expand call to it

and it'll show all the users in each

Got it, yeah this might work out. Thanks !!!

Or I can probably use lookup API, I store type of all permission with a resource type , then issue a lookup API for each permission, then merge it.

if you're looking for one user/group, I'd recommend the check

if it is for all, I'd recommend the expand

basically, if you're building a permissions panel, expand is the recommendation

Problem I see with expand is, I will have to issue request for each document id of document type, my understanding is if I have 4 possible relation with a document type, I can get this done in 4 parallel request of using lookup. Maybe I am missing something.

> for each document id of document type

you mean for each permission/relation?

what, exactly, are you trying to do?

I am trying to look , "for a given user/group get all permission on a document type." Group 1 can have view permission on document-id-1 Group 1 can have write permission on document-id-2 Need to prepare a list of such information.

check for each permission

lookup returns all resources that has a particular permission for a specific user/group

but you're checking for a specific resource

Hmmm, in request body it takes a specific subject

yes

you said "for a given user/group"

sorry

lookup returns all resources

but for a particular permission

I misread