without knowing more details about the use case, I...
# spicedbj
Joey
02/21/2023, 3:58 PMwithout knowing more details about the use case, I can say that calling LS for each resource ID would be slow, at least. I imagine there is a better approach
a
antoine4093
02/21/2023, 4:05 PMHere's some more detail: i have this schema, and I need to query spicedb to synchronise permission on an other database
antoine4093
02/21/2023, 4:07 PMSo if I know the database beforehand, I can call LS for a specific database, e.g. to list all subjects who have the "only_read" permission
antoine4093
02/21/2023, 4:08 PMBut if I don't, I have to find a way to know them all and query each one (which would indeed be slow but is not a dealbreaker in my configuration)
j
Joey
02/21/2023, 4:09 PMis that the only permission you want synchronized?
a
antoine4093
02/21/2023, 4:09 PMYes
j
Joey
02/21/2023, 4:09 PMand this is to determine which user(s) have access to which database(s)?
Joey
02/21/2023, 4:10 PMif so, https://github.com/authzed/spicedb/issues/207 is a proposal that might help once ready
a
antoine4093
02/21/2023, 4:12 PMInteresting, thanks
antoine4093
02/21/2023, 4:13 PMI'll keep an eye on this, and hack something in the meantime
antoine4093
02/21/2023, 4:13 PMThank you for your time
j
Joey
02/21/2023, 4:13 PM> I have to find a way to know them all
probably doable just by ReadRelationships to get the resource IDs for the database
Joey
02/21/2023, 4:13 PMor getting the IDs on your side
a
antoine4093
02/21/2023, 4:15 PMYeah i thought about that, or I might go with a direct query to the datastore
antoine4093
02/21/2023, 4:16 PMSomething like
select distinct namespace as objectType, object_id as objectId from relation_tuple where namespace = 'database'