Hi SpiceDB team
# spicedb
v
Hi SpiceDB team, I'm using SpiceDB in order to implement an authorization model to manage permissions for projects in my application. Simply put, I need to check which of the projects a particular user has permission to view when they try to list all the projects. Since the existing CheckPermission API only can process a single permission check at a time, I would have to send in multiple calls to verify access to all my projects. Could you kindly let me know if there is a possibility of a batch check operation where I could perform multiple permission checks in a single network call ? I'm also open to any other suggestions or approaches that I could use. Thanks in advance!
v
@Viduranga The new BatchCheck API is going to be published as part of SpiceDB 1.25. You can already preview it if you run our nightly container builds
Alternatively you can use
LookupResources
but only if you need to list all resources they have access to
if you want to check a subset, either concurrently call
CheckPermission
(gRPC reuses the same underlying HTTP Connection) or use the upcoming
BulkCheck
v
@vroldanbet Really appreciate your prompt and informative response. Looking forward to trying out the new
BatchCheck
API.
@vroldanbet Would you be able to let me know an ETA on the v1.25 release if possible?
v
Just published v1.25.0-RC1 https://github.com/authzed/spicedb/releases/tag/v1.25.0-rc1 Cannot say to ETA, we are still running internal tests
a
Is there a config field
RequestHedgingEnabled
in the spicedb operator CR for disabling the hedging?
v
I believe you can forward any flag supported by SpiceDB and the operator will forward it
v
Thanks @vroldanbet. This is good enough for us to do our preliminary tests.