@filth that sounds pretty doable with SpiceDB. The API includes

LookupResources

which lists all the resources the user has access to. It's a streaming RPC method. When it comes to denormalizing that information into a different system, for that you would need the upcoming

LookupWatch

API, which provides a streaming API of changes so that other systems (like search indexes) can keep a copy. More info at https://github.com/authzed/spicedb/issues/207