I would like to keep using rego as a policy engine.
To authorize we need 3 elements:
- Policies
- Input (user id, env conditions, etc)
- Data (models)
Policies and input provided to rego by the golang backend.
I'd like to use SpiceDB to modelize the assets we provide and the relationships between them
ie: server_1 owned by tenant_2
user_1 member of tenant_2
So that spiceDB provides the data injected into the decision engine