@filth that sounds pretty doable with SpiceDB. The API includes

LookupResources

which lists all the resources the user has access to. It's a streaming RPC method. When it comes to denormalizing that information into a different system, for that you would need the upcoming

LookupWatch

API, which provides a streaming API of changes so that other systems (like search indexes) can keep a copy. More info at https://github.com/authzed/spicedb/issues/207

@vroldanbet thanks for the clarification

Thx... I looked in to SCIM integrations. Looks like a good fit.

Hi. Is it just on my computer/network that the playground assertions don't work? It's stuck at "Dev service loading" and the Last Validation Run returns

Validation Call Failed. Please try again shortly

.

seems to be working for me

can you check i you get any errors in developer tools console?

Failed to load development package: DOMException: The operation was aborted.

Also I see that the WASM file is not loading (never finishes loading, i.e. no 200 status is shown)

ah now it finished ^_^

just took almost 30s

and when I now hit Run, all I see in the console are messages that read

Got incoming posted message

and then some object

the wasm file does not seem to be cached in any cdn, where in the world are you initiating the request? it took 6 seconds for me to load from Spain

Switzerland

fast.com says 830 Mbps, so I don't think it's the connection 😉

with the wasm file loaded, it should all happen client side

browser?

Firefox Dev Edition, but same in regular Firefox

Hey everyone, I'm new to SpiceDB and to gRPC. I have a PHP app that I am trying to connect to SpiceDB. I've got gRPC module setup on my web server, but now I am trying to build the PHP libs from the SpiceDB proto files. I have

protoc

installed and was able to build libs from one of the sample gRPC examples. Looking in the proto/internals folder of SpiceDB, I see that

buf

is being used. Should I be using

buf

to build my PHP libs? Am I on the right track?

using buf is generally recommended, yes

@here Today, we're proud to announce the launch of the SpiceDB Operator. We've silently been relying on it in production for 4 months, so it's rock solid. We've also open sourced our micro-framework for building operators! See our latest blog post: https://authzed.com/blog/open-source-spicedb-operator/

SpiceDB Operator is Open Source

Is there a standard way to seed a new permissions system with default relationships, other than by pushing them manually? Can they be embedded in a schema, for example?

spicedb serve

takes two flags to help with that:

--datastore-bootstrap-files strings                       bootstrap data yaml files to load
      --datastore-bootstrap-overwrite                           overwrite any existing data with bootstrap data

the file format they take is the same that the playground exports when you save to a file

Is the Playground having issues? I've got a simple schema that works as intended in the playground but the moment I try to import it into authzed, it fails with message "failed when contacting upstream gRPC service". Definition here: https://gist.github.com/Vannevelj/69c56fa209fd0b0c660490bf8c945da6

thanks for bringing this to our attention - we'll look into it

playground issue

I'm trying to build php libs for SpiceDB, but the validate library doesn't support PHP. Does anyone know how I can generate libs for PHP?

do you get an error? you don't have to validate client-side, we validate everything server-side

I modified

buf.gen.yaml

from

opt: "paths=source_relative,lang=go"

to

opt: "paths=source_relative,lang=php"

. Then I ran

buf generate proto/internal

. Then I get `[validator]could not find templates for `lang`: php`

It appears that the validate library used to annotate the types in the proto files doesn't have a template for PHP, just Java, Go, C++, Python and Starlark.

try just dropping the validate plugin block altogether