Hi there, is it possible to use multiple
# spicedb
f
Hi there, is it possible to use multiple @ sections in the assertions at the playground? I have added allowed_app to this example: https://play.authzed.com/s/AC1cTOErMCIl/schema I want to allow users to not only choose, which other users have access to their files, but also what apps, so somehow i would need to give the information on what app the user is using to the assertion
y
not as such, no. the way to think about a permission check is that it's a walk from a resource to a subject. if the path exists, the check succeeds, else it fails. what that means is that you typically want to walk through an object if it's supposed to be a part of the permission logic. there isn't a way to provide multiple subjects to the permission check. i'd add a hop from the file group to the app to the user group or something equivalent. this is also potentially a use case for [caveats](https://authzed.com/docs/spicedb/concepts/caveats), though i'd recommend using relations to express logic if it's possible, and then only reaching for caveats if you can't
f
Alright, thank you! I will try it out.
Will AuthZed Materialize become open source at one point?
y
unlikely, but i don't know
3 Views