https://github.com/authzed/spicedb/issues/207, but what question, exactly, are you trying to answer?

Which objects does user X have access to? Where user X could be part of an admin group which has access to a lot objects or just a normal user which has access to few. I've read many messages about pre and post filtering and even some about multiple API calls where the first query is used check what groups the user has access (less granular access check) to and then if that fails (no group access) doing a full lookup.

that issue covers the current line of thinking

@Joey what is current status of the above #207 issue? In my company we are just evaluating different FGA services for our upcoming project and ability for

fast ACL-aware filtering

is really important for us

still in the exploration phase

I see some parts of your proposal are already implemented, like LookupSubjectsRequest. ReachableResourcesRequest is still missing, right?

ReachableResources is part of LookupResources