permify icon indicating copy to clipboard operation
permify copied to clipboard

Zookie Support

Open EgeAytin opened this issue 2 years ago • 1 comments

Support for Google Zanzibar's Zookie. To prevent casual ordering problem on relational tuples modification or content updates (New Enemy Problem), which causing false negative or false positive decision results on authorization checks, a token needed to be developed to get a snapshot of the permissions as evaluated at a single point in time. This token called Zookie on Google Zanzibar paper.

Zookie token can be used in two scenarios:

  1. On relational tuple or permify schema update, a snapshot timestamp ( Zookie ) needed to be send via request to ensure that all prior updates have lower timestamp.

  2. On checking access decisions, sending check access API call with Zookie token ensures getting a fresh decision response, or a response that only belongs a filtered time frame, which user specifies on purpose.

EgeAytin avatar Aug 06 '22 13:08 EgeAytin

This issue has been linked to a Canny post: Zookie Support :tada:

canny[bot] avatar Aug 11 '22 19:08 canny[bot]