I would like to keep using rego as a
# spicedb
e
I would like to keep using rego as a policy engine. To authorize we need 3 elements: - Policies - Input (user id, env conditions, etc) - Data (models) Policies and input provided to rego by the golang backend. I'd like to use SpiceDB to modelize the assets we provide and the relationships between them ie: server_1 owned by tenant_2 user_1 member of tenant_2 So that spiceDB provides the data injected into the decision engine
v
there is also this community project that mixes OPA and SpiceDB: https://github.com/umbrellaassociates/opa-spicedb
it basically let's you call SpiceDB from OPA, if I'm not mistaken
5 Views