844600078504951838 #spicedb

Channels

Igor.Shmukler

09/14/2022, 11:30 AM

i will take a look. i do think that more examples and helpers would be awesome. i am very impressed by how well SpiceDB actually works. usually, young OSS are nowhere near quality of SpiceDB. yet, i think that docs and various helpers are lacking, hence my contribution bits here and there. i would rather those things get merged and perfected further later.

vroldanbet

09/14/2022, 11:35 AM

I assume that what you'd like to see is client specific examples? we have quite a lot of documentation in https://docs.authzed.com/, but I do see how it does not provide concrete client-specific examples

vroldanbet

09/14/2022, 11:37 AM

for example, in https://docs.authzed.com/guides/first-app you can see some basic operations in various languages, but Javascript is unfortunately not one of them

Igor.Shmukler

09/14/2022, 12:56 PM

this is fine. you do have JavaScript SDK. examples and helper functions are not very difficult to built. as far as specifically "building first app guide" and figuring out how to do an expand based on the types for the corresponding RPC call - there is a little bit of a gap to bridge, for someone like me at least. regardless, you have given me several reference points. perhaps, i will able to use those and make something that can be adopted into a JavaScript example.

Joey

09/14/2022, 1:48 PM

https://github.com/authzed/authzed-node/issues/19 if you want to open a PR for them in the client

Igor.Shmukler

09/14/2022, 2:13 PM

@Joey something like https://github.com/authzed/authzed-node/pull/39/files - ?

Joey

09/14/2022, 2:14 PM

yes, although that file is generated, so the functions should be added in https://github.com/authzed/authzed-node/blob/main/src/v1.ts

radmongoose

09/14/2022, 2:21 PM

Got it. Yeah. There are 10K subjects in the arrow relation. Does that mean when modeling our schemas that one should generally try to avoid wide relations like this?

Joey

09/14/2022, 2:21 PM

do all 10K need to be followed for resolution purposes?

Joey

09/14/2022, 2:21 PM

if not, then ideally you'd move the majority to another relation

Joey

09/14/2022, 2:22 PM

if so, we have a change coming that should result in a major performance boost: https://github.com/authzed/spicedb/pull/777

Igor.Shmukler

09/14/2022, 2:26 PM

@Joey v1.ts exports /authzedapi/authzed/api/v1/permission_service.grpc-client

Joey

09/14/2022, 2:27 PM

yes, but you should be able to add new functions into that file, either on the client or adjacent

radmongoose

09/14/2022, 2:27 PM

Yeah. The use case here is a school having relationships with various companies and those companies in turn having relations to employees for different roles. So to see who can message students at a school you have to find the employees at the associated companies with the message relation. Thankfully, I'm just doing a poc right now to understand the limits and I don't need to model this part of it in real life for awhile. That's good news about the performance boost PR Will be good to re-test when that's released.

Igor.Shmukler

09/14/2022, 2:28 PM

Joey

09/14/2022, 2:29 PM

yeah, there might be a way to optimize that further. Fortunately, the change above ^ will change the dispatch in that case from ~10K dispatches to ~100, which is a major improvement

Igor.Shmukler

09/14/2022, 2:34 PM

is it possible to call the

ExpandPermissionTree

RPC using

zed

? what would it look like?

Joey

09/14/2022, 2:39 PM

zed permission expand somepermission resource:foo

Igor.Shmukler

09/14/2022, 2:40 PM

thank you, @Joey !!!

Igor.Shmukler

09/14/2022, 2:47 PM

does

ExpandPermissionTree

support wildcards? for me, it is working with named relations, yet when i pass

it errs.

$ zed permission expand edit event:5
event:5->edit
 └── union
      ├── event:5->edit
      │    └── union
      │         ├── event:5->edit
      │         │    └── union
      │         │         ├── event:5->writer
      │         │         └── event:5->maintainer
      │         └── event:5->admin
      └── event:5->edit
           └── union
                └── organization:1->owner
                     └── user:2

with a wildcard:

$ zed permission expand * event:5
Error: accepts 2 arg(s), received 8
Usage:
  zed permission expand <permission> <resource:id> [flags]

Jake

09/14/2022, 2:47 PM

* is probably getting expanded by your shell

Jake

09/14/2022, 2:47 PM

try wrapping the parameters in single quotes

Igor.Shmukler

09/14/2022, 2:48 PM

thank you, @Jake

Igor.Shmukler

09/14/2022, 2:48 PM

$ zed permission expand '*' event:5
Error: rpc error: code = InvalidArgument desc = invalid ExpandPermissionTreeRequest.Permission: value does not match regex pattern "^([a-z][a-z0-9_]{1,62}[a-z0-9])?$"
Usage:
  zed permission expand <permission> <resource:id> [flags]

@Jake ^^^ ?

Jake

09/14/2022, 2:49 PM

oh yeah, that's just not supported by expand haha

Igor.Shmukler

09/14/2022, 2:49 PM

you were correct about shell messing with

Jake

09/14/2022, 2:49 PM

you can only expand one relation/permission

Igor.Shmukler

09/14/2022, 2:50 PM

is there a way to get all relations for a given object, without filtering them by the relation name?

Igor.Shmukler

09/14/2022, 2:51 PM

basically, say i have a "repository" and i want to see what users what access and of what kind

Igor.Shmukler

09/14/2022, 2:51 PM

going back to your excellent github demo