So, having read that blog on Protecting a Blog App...
# spicedb
a
So, having read that blog on Protecting a Blog Application (and https://authzed.com/blog/user-defined-roles, which is probably a bit more clear about writing the application logic), one thing I'm still left wondering is how people are actually incorporating SpiceDB into their applications. Let's say I have a
user
,
team
, and
files
, I want to assign users to teams and grant users or teams with access to files. It seems like I'll need to model and store those resources in a DB somewhere and to trigger operations to sync any changes (ie adding a user to a group) with SpiceDB, right? Is there any support or guidance for doing this? Or is that entirely left up to the implementor? I'm obviously using SpiceDB to build an application and am comfortable building an admin to manage some permissions, however I'm in early-prototype phase and being able to lean on something out of the box would be very helpful.