keto
keto copied to clipboard
ory
Open Source (Go) implementation of "Zanzibar: Google's Consistent, Global Authorization System". Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and ot...
**Is your feature request related to a problem? Please describe.** Caching is to be considered later and can be added behind the Persister interface. Groupcache (by Google) is a library...
**Is your feature request related to a problem? Please describe.** Zanzibar allows the client to configure database sharding per namespace. Form §3.1.1: > Our clients configure sharding of a namespace...
### Preflight checklist - [X] I could not find a solution in the existing issues, docs, nor discussions. - [X] I agree to follow this project's [Code of Conduct](https://github.com/ory/hydra/blob/master/CODE_OF_CONDUCT.md). -...
I couldn't find information on which guidelines to follow when checking if a subject has permissions to create a **new object**. It's clear that relations for **existing objects** must have...
**Describe the bug** github.com/ory/keto/internal/expand: module github.com/ory/keto@latest found (v0.5.2), but does not contain package github.com/ory/keto/internal/expand **Reproducing the bug** Steps to reproduce the behavior: I'm having a problem with the Extension API....
The SQL persister is not benchmarked and optimized yet. There might be things we would have to tweak in pop. Ideas for improvement: - [ ] https://github.com/ory/keto/pull/266#discussion_r534263087
**Describe the bug** In [RESTAPI doc](https://www.ory.sh/keto/docs/reference/rest-api#delete-a-relation-tuple) It says parameter `subject` is not required. But in code here https://github.com/ory/keto/blob/2e93d996576842707f7c65dd7b5d7bd0c917331b/internal/persistence/sql/relationtuples.go#L178-L192 `whereSubject` verify `subject` https://github.com/ory/keto/blob/2e93d996576842707f7c65dd7b5d7bd0c917331b/internal/persistence/sql/relationtuples.go#L172-L173 **Reproducing the bug**  **Expected behavior** It should...
**Describe the bug** > I'm trying to run the service that I installed from brew on Mac OS I've got an error: unable to initialize config provider: bad file descriptor....
**Describe the bug** Noticed by @radekg in https://github.com/ory/keto/issues/598#issuecomment-842677636: ```sh curl --silent 'http://localhost:4466/expand?namespace=default-namespace&subject=Fry&relation=member&max-depth=2' | jq '.' ``` returns ```json { "type": "union", "subject": "default-namespace:#member", "children": [ { "type": "leaf", "subject": "Bender"...
**Describe the bug** The [Query relation tuples](https://www.ory.sh/keto/docs/reference/api/#query-relation-tuples) API returns 500 with message `malformed string input` when called without the `subject` parameter. The docs state that only required parameter is `namespace`...
