Though I would expect the EOF to persist, rather than returning result, nil

Still having an issue:

count := 0
for resp, err := readClient.Recv(); ; {
    log.Printf("loop %s   %s\n", resp, err)
    if err != nil && !errors.Is(err, io.EOF) {
        log.Printf("Error in looking up sub damproto/user:%s relation to damproto/group:users : %s \n", sub, err.Error())
        usersRelation = "ERROR"
        break
    }
    if resp != nil && resp.Relationship != nil && resp.Relationship.Relation != "" {
        usersRelation = usersRelation + resp.Relationship.Relation + " "
    }
    count++
    if errors.Is(err, io.EOF) || count > 10 {
        break
    }
}

Outputs

2022/12/21 13:10:11 loop read_at:{token:"GhUKEzE2NzE2NTcwMTAwMDAwMDAwMDA="} relationship:{resource:{object_type:"damproto/group" object_id:"users"} relation:"admin" subject:{object:{object_type:"damproto/user" object_id:"2"}}}   %!s(<nil>)

10 times then exits due to my count limit

So EOF is never being returned

Coworker found my error: I'm only calling Recv() once

here's a good way to do the for loop for streams:

for err := stream.RecvMsg(msg); !errors.Is(err, io.EOF); err = stream.RecvMsg(msg) { ... }

I am trying this in my local Kubernetes Cluster https://authzed.com/docs/spicedb/operator NB: Don't have any prior experience in Kubernetes.

kubectl port-forward deployment/dev-spicedb 50051:50051
Error from server (NotFound): deployments.apps "dev-spicedb" not found

Am I doing anything wrong ? something missing in the document ?

Hi, I have a question about a design pattern. In my application, I have some users with the rights (patient-edition or patient-access-all). With these rights, the user can access for all patients or can update the patient. I have a definition (patient) like this :

definition patient {
    relation owner: user
    relation doctor: user
    relation technician: user

    permission read = owner + doctor + technician
    permission write = owner + doctor + technician
  }

But I would like to verify the user right inside the read / write permission. I don't know if the right must be define in the user definition or somewhere else. Is there a design pattern for user right ? thanks

SpiceDB Operator | authzed

Hi I have a question about a design

Thanks @vroldanbet ,will try NewRelic with prometheus agent

This is related to authzed serverless , I have invited a user in a permission system under org name cimpress. But when user logs in they are able able to see the permission system. Could you please help

This is related to authzed serverless I

Hi, I am trying to use the java client (0.4.0) to connect to a local instance of spicedb in docker. I am getting "unauthenticated" back from the server. Is the bearer token supposed to be the grpc preshared key set as an env var? Or am i missing something else (attached error and code)

io.grpc.StatusRuntimeException: UNAUTHENTICATED
    at io.grpc.stub.ClientCalls.toStatusRuntimeException(ClientCalls.java:271)
    at io.grpc.stub.ClientCalls.getUnchecked(ClientCalls.java:252)
    at io.grpc.stub.ClientCalls.blockingUnaryCall(ClientCalls.java:165)
    at com.authzed.api.v1.SchemaServiceGrpc$SchemaServiceBlockingStub.writeSchema(SchemaServiceGrpc.java:255)

java
        ManagedChannel channel = ManagedChannelBuilder
                .forTarget("localhost:50051")
                .usePlaintext()
                .build();

        BearerToken bearerToken = new BearerToken("foobar");
        SchemaServiceGrpc.SchemaServiceBlockingStub schemaService = SchemaServiceGrpc.newBlockingStub(channel)
                .withCallCredentials(bearerToken);

        String schema = """
                definition blog/user {}
                
                definition blog/post {
                    relation reader: blog/user
                    relation writer: blog/user
                    
                    permission read = reader + writer
                    permission write = writer
                }
                """;

        WriteSchemaRequest request = WriteSchemaRequest.newBuilder()
                .setSchema(schema)
                .build();

        WriteSchemaResponse response;
        try {
            response = schemaService.writeSchema(request);
        } catch (Exception e) {
            e.printStackTrace();
            return;
        }

        System.out.println(response);

any help is much appreciated 🙂

the bearer token is whatever preshared key you used when you started SpiceDB

- "SPICEDB_GRPC_PRESHARED_KEY=foobar"

I started it with this ^, is there something else i am missing in the example?

one moment

where did you put that?

in the

env

of a compose file

hm there is also this error:

Receiver class io.grpc.netty.shaded.io.grpc.netty.NettyClientTransport does not define or inherit an implementation of the resolved method 'abstract io.grpc.internal.ClientStream newStream(io.grpc.MethodDescriptor, io.grpc.Metadata, io.grpc.CallOptions, io.grpc.ClientStreamTracer[])' of interface io.grpc.internal.ClientTransport.

, perhaps it is related

does

zed

work against?

yeah

at least adding it with the config command did

i havent tried any others

try

zed schema read

Error: rpc error: code = NotFound desc = No schema has been defined; please call WriteSchema to start

i guess it is connecting

yep

so its something with your Java client then

i was just missing a dependency 🙂 (

io.grpc:grpc-netty-shaded:1.51.1

)

really good when the netty module isnt actually what you need to use netty as a backend haha

good to know