SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions.

SpiceDB

The permission checks are not working. for example:
emilia = SubjectReference(
    object=ObjectReference(
        object_type="blog/user",
        object_id="emilia",
    )
)
beatrice = SubjectReference(
    object=ObjectReference(
        object_type="blog/user",
        object_id="beatrice",
    )
)

post_one = ObjectReference(object_type="blog/post", object_id="1")

resp = client.CheckPermission(
    CheckPermissionRequest(
        resource=post_one,
        permission="read",
        subject=emilia        
    )
)
assert resp.permissionship == CheckPermissionResponse.PERMISSIONSHIP_HAS_PERMISSION