Admin dashboard for viewing/editing permissions

[mgagliardo91]

Feature Request

Once a schema and the underlying relations begin to grow, it can be a bit difficult to rely only on the zed CLI or internal tooling to view the current state of the permissions graph (i.e. lookup permissions for a specific target/relation, diagnose failed permission checks, etc).

It would be convenient to enact these capabilities from a admin UI dashboard. Some thoughts on initial feature set:

• View the generated graph (like the playground) of the currently stored schema (and maybe some metadata about its generation, etc)
• Lookup subjects and resources for a given query
• Graphically explain for a permission check (similar to the --explain flag added to the CLI)
• Modify/write relationships manually (i.e. give adhoc permission to a user, etc)

This could live separately from this repo, similar to the other clients, as just a UI-based client and should support both authzed-hosted/self-hosted spicedb instances.

I would love to hear if there is any other interest in something like this. It would be a nice capability to ship with the open-source project.

[palacerteupgrade]

Great idea. We use gitops to modify our schema, but having a UI + Explain capability would be great to help our dev teams.

[vinayagg]

The most useful feature I can think of is this -> If I have a group hierarchy and I can restrict access by group. Then I can let each team control their own permissions.

[alecmerdler]

It may not fulfill all of the requirements raised by this issue, but the SpiceDB Playground is now open-source and can be ran locally or deployed.