authzed/spicedb on Hacker News

…or more time wasted on code review if you can just turn it into a linter and move on. [0]: https://github.com/authzed/spicedb/tree/main/tools/analyzers

comment by jzelinskie · 2026-07-26 · in Go Analysis Framework: modular static analysis by go team

…scale, is incredibly complex. For SpiceDB, we have Materialize to help solve this problem [2]. [1] https://github.com/authzed/spicedb/tree/e9d636d2b58dd9e92c44... [2] https://authzed.com/docs/authzed/concepts/authzed-materializ...…

comment by jschorr · 2026-07-07 · in Better Auth is joining Vercel

There are quite a few OSS Zanzibar-inspired authorization services/servers: - SpiceDB (https://github.com/authzed/spicedb) - Permify (https://github.com/Permify/permify) - Warrant (https://github.com/warrant-dev/warrant) - Ory Keto…

comment by mirzap · 2025-12-24 · in Permission Systems for Enterprise That Scale

…but I do also like policy engines. [0]: https://www.cedarpolicy.com/en/playground [1]: https://github.com/authzed/spicedb

comment by evancordell · 2023-08-17 · in Policy Engines: Open Policy Agent vs. AWS Cedar vs. Google Zanzibar

…but p95 or p50 is often FAR lower. Disclosure: I'm a co-creator and maintainer of SpiceDB[0] [0]: https://github.com/authzed/spicedb

comment by jzelinskie · 2023-08-08 · in Blueprint for a distributed multi-region IAM with Go and CockroachDB

…Disclaimer, I’m one of the founders of Warrant. [1] https://github.com/warrant-dev/warrant [2] https://github.com/authzed/spicedb

comment by kkajla · 2023-06-30 · in Policy as Code vs. Policy as Graph Comparison

…- https://github.com/spf13/cobra - CLI framework FWIW, I just lifted all the tools we use for https://github.com/authzed/spicedb We've also written some custom linters that might be useful for other folks:…

comment by jzelinskie · 2023-05-23 · in How to start a Go project in 2023

…like SpiceDB[1] rather than reinventing the wrong wheel. [0]: https://www.openpolicyagent.org [1]: https://github.com/authzed/spicedb

comment by jzelinskie · 2023-05-12 · in CIAM vs. IAM: What's the difference (2022)

…://www.openpolicyagent.org/docs/latest/policy-language/ [1]: https://youtu.be/k6pPcnLuOXY?t=2037 [2]: https://github.com/authzed/spicedb [3]: https://zanzibar.tech

comment by jzelinskie · 2023-05-10 · in Cedar policy language is now open source

…could be improved. I suspect it might be complicated if Supabase assumes RLS for everything. [0]: https://github.com/authzed/spicedb

comment by jzelinskie · 2023-04-13 · in Supabase Auth: SSO, Mobile, and Server-Side Support

…a graph) is similar to solving these problems as well! [0]: https://authzed.com/blog/caveats/ [1]: https://github.com/authzed/spicedb

comment by jzelinskie · 2023-04-10 · in Feature flags and authorization abstract the same concept

…that are uncommon operations in relation databases. [0]: https://github.com/quay/clair [1]: https://github.com/authzed/spicedb

comment by jzelinskie · 2023-03-31 · in Postgres as a graph database

…you write yourself to deploy on your own clusters (I realize I'm in the minority here). [0]: https://github.com/authzed/spicedb/releases/tag/v1.14.0

comment by evancordell · 2023-03-09 · in Writing a Kubernetes Operator

…are building an open source version of Zanzibar known as SpiceDB [2] [1] https://zanzibar.tech [2] https://github.com/authzed/spicedb

comment by jschorr · 2023-02-20 · in AWS Creates New Policy-Based Access Control Language Cedar

If you're curious to see a Postgres-based implementation, SpiceDB has a Postgres driver: https://github.com/authzed/spicedb/tree/main/internal/datast...

comment by jschorr · 2022-12-09 · in Google Zanzibar Through Our Eyes

…group. I threw together an example in our playground [1], if you'd like to try it out! [0]: https://github.com/authzed/spicedb [1]: https://play.authzed.com/s/9D5h9I7mE9mK/schema

comment by jschorr · 2022-12-08 · in Google Zanzibar Through Our Eyes

…than AWS or Google Cloud's IAM services, despite a fork of it actually powering GCP's IAM. [0]: https://github.com/authzed/spicedb

comment by jzelinskie · 2022-11-17 · in Amazon’s distributed computing manifesto (1998)

…much easier way to think about relationships even if they are logically equivalent to hierarchies. https://github.com/authzed/spicedb

comment by tarasglek · 2022-11-12 · in AWS IAM Roles, a tale of unnecessary complexity

…SpiceDB is also a big user of vtprotobuf[2] -- a great contribution to the Go gRPC ecosystem. [0]: https://github.com/authzed/spicedb [1]: https://github.com/jackc/pgx [2]: https://github.com/planetscale/vtprotobuf

comment by jzelinskie · 2022-11-01 · in One Million Database Connections

…loved this article from OSO with Abhishek Parmar, one of the co-creators of Zanzibar [3] [0]: https://github.com/authzed/spicedb/issues/386 [1]: https://www.osohq.com/docs/concepts/oso-cloud-data-model [2]:…

comment by rhamzeh · 2022-10-24 · in Show HN: Topaz: open-source authorization combining the best of OPA and Zanzibar

…Keto's intro video @ SV IAM User Group [0] is worth a watch. Other OSS Zanzibar implementations: - https://github.com/authzed/spicedb - https://github.com/Permify/permify - https://github.com/openfga/openfga [0]:…

comment by rhamzeh · 2022-10-24 · in Show HN: Topaz: open-source authorization combining the best of OPA and Zanzibar

…coordinate with causality across multiple services. [0]: https://github.com/vitessio/vitess [1]: https://github.com/authzed/spicedb

comment by jzelinskie · 2022-08-23 · in What's the big deal about embedded key-value databases?

…it wouldn't be an issue. [0]: https://cockroachlabs.com/blog/living-without-atomic-clocks/... [1]: https://github.com/authzed/spicedb [2]: https://authzed.com/blog/prevent-newenemy-cockroachdb/

comment by evancordell · 2022-08-05 · in Strict-serializability, but at what cost, for what purpose?

…start a company based on the Zanzibar paper. Out of that, the open source SpiceDB[0] was born. [0]: https://github.com/authzed/spicedb

comment by jzelinskie · 2022-08-04 · in Ask HN: What HN post made you money?

…database instances so that trips to the datastore (e.g. Postgres) are avoided at all costs. [0]: https://github.com/authzed/spicedb

comment by jzelinskie · 2022-07-28 · in EdgeDB 2.0

…of our users and our business. [0]: https://twitter.com/authzed/status/1443590501484032002 [1]: https://github.com/authzed/spicedb

comment by jzelinskie · 2022-07-27 · in Launch HN: Warrant (YC S21) – Authorization and access control as a service

…it in the hands of developers to construct the abstraction that matches their domain[2]. [0]: https://github.com/authzed/spicedb [1]: https://github.com/authzed/examples/tree/main/integration-te... [2]:…

comment by jzelinskie · 2022-07-26 · in Shipping Multi-Tenant SaaS Using Postgres Row-Level Security

…[2]: https://buf.build/authzed/api/docs/main:authzed.api.v1#authz... [3]: https://github.com/authzed/spicedb/issues/207

comment by jschorr · 2022-07-15 · in Show HN: Permify – Open-source authorization service based on Google Zanzibar

…(OAuth2, User Mangement) - Authzed came out as a SaaS only, open sorucing the code base later on at https://github.com/authzed/spicedb - Auth0 has been playing around with Zanzibar concepts in various forms and published a beta service at…

comment by scorpiopie · 2022-07-14 · in Show HN: Permify – Open-source authorization service based on Google Zanzibar

…Permify handles consistency (e.g. the Zookies/The New Enemy Problem from the Zanzibar paper)? [0]: https://github.com/authzed/spicedb [1]: https://github.com/authzed/connector-postgresql

comment by jzelinskie · 2022-07-14 · in Show HN: Permify – Open-source authorization service based on Google Zanzibar

…between Zitadel and SpiceDB[0] to have a full, modern AuthN+AuthZ stack with few dependencies. [0]: https://github.com/authzed/spicedb

comment by jzelinskie · 2022-05-17 · in Zitadel: The best of Auth0 and Keycloak combined

…the best of both worlds. If that sounds interesting, you can participate in the proposal[1]. [0]: https://github.com/authzed/spicedb [1]: https://github.com/authzed/spicedb/issues/386

comment by jzelinskie · 2022-04-07 · in Policy-as-Code or Policy-as-Data? Why Choose?

…are typically enforced at schema-validation/compile-time (think DDL) to runtime (think DML). [0]: https://github.com/authzed/spicedb [1]: https://play.authzed.com [2]: https://github.com/authzed/action-spicedb-validate

comment by jzelinskie · 2022-03-16 · in Hands-On with PostgreSQL Authorization – Part 2 – Row-Level Security

…system is correct?" - "Can I support user-defined permissions?" [0]: https://authzed.com [1]: https://github.com/authzed/spicedb [2]: https://www.osohq.com [3]: https://www.openpolicyagent.org

comment by jzelinskie · 2022-03-16 · in Hands-On with PostgreSQL Authorization – Part 2 – Row-Level Security

…of rows affect. A flat query is easy to compute, thus cheap. [0]: https://authzed.com/pricing [1]: https://github.com/authzed/spicedb

comment by jzelinskie · 2022-02-25 · in PlanetScale increases plans to include billions of reads

…and Hydra seems like it could help. What kind of consistency guarantees can be made? [0]: https://github.com/authzed/spicedb

comment by jzelinskie · 2022-02-23 · in Launch HN: Hydra (YC W22) – Query any database via Postgres

…zed.com/reference/glossary#acl-filtering [1]: https://authzed.com/blog/acl-filtering-in-authzed/ [2]: https://github.com/authzed/spicedb [3]: https://authzed.com/blog/what-is-zanzibar/

comment by jzelinskie · 2022-02-16 · in Aserto: Developer API for permissions and RBAC

…zed.com/reference/glossary#acl-filtering [1]: https://authzed.com/blog/acl-filtering-in-authzed/ [2]: https://github.com/authzed/spicedb

comment by jzelinskie · 2022-02-09 · in Ask HN: How did you solve the pagination in role based access system?

…open source[0]. Feel free to hack around with it and drop into our community Discord[1] [0]: https://github.com/authzed/spicedb [1]: https://authzed.com/discord

comment by jzelinskie · 2022-01-02 · in Ask HN: Who wants to collaborate?

…service to operate your database for you (e.g. RDS) so that you can install your own plugins. [0]: https://github.com/authzed/spicedb [1]: https://authzed.com/blog/what-is-zanzibar/ [2]: https://docs.authzed.com/reference/glossary#acl-filte…

comment by jzelinskie · 2021-11-23 · in How We Turn Authorization Logic into SQL

…around for a very long™ period of time, similar to how Stripe handles their API versioning.[1] [0] https://github.com/authzed/spicedb/issues/147 [1] https://stripe.com/docs/api/versioning

comment by jakemoshenko · 2021-10-01 · in SpiceDB Is Open Source

…an issue for this[1]. [0]: https://authzed.com/blog/spicedb-is-open-source/#everybody-i... [1]: https://github.com/authzed/spicedb/issues/154

comment by jzelinskie · 2021-09-30 · in SpiceDB Is Open Source