but in order to find the set of subjects to use for the check, you'll need to know how to translate the call for arrows

and yes, there are performance implications as well

but the above process is more or less how the first implementation will go

with improvements coming shortly thereafter

when running

./spicedb serve --grpc-preshared-key "somerandomkeyhere"  --datastore-engine postgres --datastore-conn-uri "postgres://<user>:<password>@localhost:5432/spicedb?sslmode=disable"

i'm seeing

"unable to query DB stats: unable to query unique ID: ERROR: relation \"metadata\" does not exist (SQLSTATE 42P01)"

you need to run

spicedb migrate

first

Hi! We had signed a contract with Authzed for Enterprise and are planning to self-host Authzed. Can we get access to the Authzed Enterprise GitHub org? Is there someone who can help us? I also emailed Jake.

yep, we'll reach out

awesome thank you! we're Curative.

ya'll should've gotten invites to the enterprise github org which has everything here: https://github.com/orgs/authzed-enterprise/packages

Build software better, together

I'm using SpiceDB to store all relationships and metadata is being stored in app relational DB. The flow is as follows :- 1. Create Organisation in App Relational DB (This is Metadata) 2. Check - 2a. If failed, EXIT WITH FAILURE 2b. If passed, MOVE AHEAD 3. Write Relationship in SpiceDB 4. Check - 4a. If passed, EXIT WITH SUCCESS 4b. If failed, Delete Organisation in App Relational DB (This is Metadata) 4c. Check - 4cA. If passed, EXIT WITH FAILURE 4cB. If failed, ??????????

Hello. I'm trying to model a

hierarchical

relationship between ancestors and descendants. ancestors are able to view all the descendant resources. I'm able to have the parent view the child resources (this works). But I'm having difficulties with grandparent accessing grandchild resources. I can provide additional info. Thanks in advance

can you share a portion of your schema?

Hi All, Hope you are well. Does anyone perhaps have an example of a connection string using unix socket? We are trying to connect to a postgres database in cloudsql. Thank you

using unix sockets with postgres

hello, can someone explain the relationships between spiceDB, authzed, and OpenFGA? My current understanding: - SpiceDB is not actually a DB, it is the service implementing the zanzibar permission model and can be connected to a DB. It's open source. - authzed is the company behind SpiceDB and also the name of SpiceDB as a service product. A client of SpiceDB would work also for authzed. - OpenFGA, no current relation with SpiceDB, but theoretically SpiceDB could implement the OpenFGA specs as they are both based on zanzibar.

correct, although SpiceDB is a database in the sense that you write data to it; the fact that it uses another DB "behind" it doesn't negate the fact that it acts as its own database on top of the underlying system (which can be swapped)

OpenFGA has no relation whatsoever with SpiceDB, beyond some usage of our code

@raffaelespazzoli can you explain what do you mean by OpenFGA specs? Because Google's Zanzibar paper is documenting an existing system rather than a real formal definition/specification, lots of folks conclude different aspects of the paper and "implement Zanzibar". As far as I know, we're the only project that fully implements every major aspect of the paper (excluding Leopard, which is by design Google-specific). We've considered building a "Zanzibar conformance suite", but it's unlikely worth the effort as SpiceDB is mature enough to be advancing the state of the art rather than just implementing the paper.

This just looks like their docs website? Is there a spec somewhere I should be looking at?

Hi beautiful people, how are you? I'm trying to install spicedb on k8s, the installation goes well but no matter how I define the PSK for client auth, spicedb always says that it is an invalid token

I'm using the official helm chart

defined the PSK on the values.yaml and also through --set argument

I can see that the deployment object is taking the argument

but when I try to connect with curl or podman, invalid token

tried zed too with doc examples and when I run it asks to store something on my local keychain but does nothing

@mrodrigo-mb if you have

--log-level=trace

turned on in your pod, it'll show the length of the secret it is using; that should help you determine if it is being set properly

nice thank you