Searching and Paginating
# spicedbc
coldog
10/30/2023, 11:11 AMHi all, is there some documentation that highlights using AuthZed as a solution to Searc / Pagination with permissions?
b
braden
10/30/2023, 1:29 PMI think you’ll find these threads interesting
https://github.com/authzed/spicedb/issues/280
https://github.com/authzed/spicedb/issues/207
braden
10/30/2023, 1:31 PMIt’s a really tricky problem. I haven’t seen great solutions to this problem in SpiceDB or in the industry as a whole.
c
coldog
10/30/2023, 1:45 PMThanks for the info, yeah this problem is really biting us at the moment; we looked at OpenFGA as well which is based on Zanzibar and they have an example but after lots of back and forth its not even really full supported by them either - really tricky issue
b
braden
10/30/2023, 1:53 PMI forgot to mention the lookup resources API:
https://buf.build/authzed/api/docs/main:authzed.api.v1#authzed.api.v1.PermissionsService.LookupResources
braden
10/30/2023, 1:54 PMBut that only really reverses the problem though
braden
10/30/2023, 2:00 PMAt the end of the day, you’re trying to do an inner join on data across two services.
I think the best you can do today is incrementally load results from one side and verify that they exist on the other.
braden
10/30/2023, 2:02 PMYou’ll probably get the best performance if you’re able to determine which side of the join is more selective and start there (do the permissions return fewer results or do the search filters return fewer results?)
j
Joey
10/30/2023, 2:43 PMcorrect, generally speaking you determine which side to filter on first, and then post-filter the other side