3 ms·

Super interesting! It's interesting to think about what Zanzibar ultimately is: an efficient way to store and traverse graphs to determine an outcome, in this c

by brancz 4y ago

Super interesting! It's interesting to think about what Zanzibar ultimately is: an efficient way to store and traverse graphs to determine an outcome, in this case typically authorization, but ever since I learned of this I keep seeing more and more problems that could be solved this way. Also I can't decide whether this paper is more interesting or the tech they built to annotate it, I keep thinking of papers I'd want to do this with now.

jzelinskie 4y ago
>an efficient way to store and traverse graphs to determine an outcome ... I keep seeing more and more problems that could be solved this way Yes! The team over at Authzed keeps seeing this, too! While SpiceDB is fully embracing its primary use-case for permissions, you could also use it to solve many other problems that boil down to "the existence of a path on a graph". For example, we've considered using it for storing update graphs for automating software updates for our Kubernetes operator[0] The wonderful Kris Nova has also made this realization and considered SpiceDB for dependency resolution for an init system designed to replace systemd[1]. [0]: https://github.com/authzed/spicedb-operator https://github.com/authzed/spicedb-operator [1]: https://docs.google.com/document/d/1dA591eipsgWeAlaSwbYNQtAQaES243IIqXPAfKhJSjU/mobilebasic#h.5r8tband51ev https://docs.google.com/document/d/1dA591eipsgWeAlaSwbYNQtAQ...
Rapzid 4y ago
Speaking specifically to efficiency, a lot of the efficiency required for practical use cases is hand-waved away as implementation details of the caching layer in Zanzibar paper. A real go at this with postgres and logical decode could be made though.
- jschorr 4y ago
  If you're curious to see a Postgres-based implementation, SpiceDB has a Postgres driver: https://github.com/authzed/spicedb/tree/main/internal/datastore/postgres https://github.com/authzed/spicedb/tree/main/internal/datast...

by brancz 4y ago

jzelinskie 4y ago

>an efficient way to store and traverse graphs to determine an outcome ... I keep seeing more and more problems that could be solved this way Yes! The team over at Authzed keeps seeing this, too! While SpiceDB is fully embracing its primary use-case for permissions, you could also use it to solve many other problems that boil down to "the existence of a path on a graph". For example, we've considered using it for storing update graphs for automating software updates for our Kubernetes operator[0] The wonderful Kris Nova has also made this realization and considered SpiceDB for dependency resolution for an init system designed to replace systemd[1]. [0]: https://github.com/authzed/spicedb-operator https://github.com/authzed/spicedb-operator [1]: https://docs.google.com/document/d/1dA591eipsgWeAlaSwbYNQtAQaES243IIqXPAfKhJSjU/mobilebasic#h.5r8tband51ev https://docs.google.com/document/d/1dA591eipsgWeAlaSwbYNQtAQ...

Rapzid 4y ago

Speaking specifically to efficiency, a lot of the efficiency required for practical use cases is hand-waved away as implementation details of the caching layer in Zanzibar paper. A real go at this with postgres and logical decode could be made though.

jschorr 4y ago
If you're curious to see a Postgres-based implementation, SpiceDB has a Postgres driver: https://github.com/authzed/spicedb/tree/main/internal/datastore/postgres https://github.com/authzed/spicedb/tree/main/internal/datast...