12 Commits (718612aabf37799a081dc81a77f6d4f91486a1a6)

Author	SHA1	Message	Date
Karl Persson	718612aabf	Zanzana: Update relation names (#97638) ... * Update relation names to match k8s verbs * Only check namespace if relation is valid * Only list for valid relations	6 months ago
Alexander Zobnin	5a91ab46af	Zanzana: Use StreamedListObjects to fetch full list of resources (#97025) ... * Initial streamed version of list * instantiate openfga client to use StreamedListObjects * Add config option for using streamed version * Use caching * fix cache init * Fix hashing * refactor	6 months ago
Karl Persson	be54c69fd4	Zanzana: Remove create relation from generic resources (#97042) ... Remove create relation from generic resources. We cant have a create relation to a resource because they don't exist yet. So in oder to check create we either have to have that permissions on a folder or the namespace	6 months ago
Karl Persson	a5e743895b	Zanzana: Capabilities api (#96682) ... * Add capabilities api	6 months ago
Karl Persson	11a4a366c6	Zanzana: Optimize batch check (#96669) ... * Restructure check code so we only check namespace access once for each GroupResource during for batch	6 months ago
Alexander Zobnin	1366197522	Zanzana: Search with check server side (#96268) ... * pass zclient into dashboard service * Search then check implementation * Use GetNamespace() for user * remove unused orgID * simple batch check * refactor * add tests * fix batchCheckItem * client implements batch check * use batch check in search * remove unused * remove All field from response * refactor: extract checkNamespace * fix search result uniqueness * comment fix * Apply suggestions from code review Co-authored-by: Karl Persson <kalle.persson@grafana.com> * refactor * cleanup * remove unnecessary check * fix tests * fix protobuf def * Fix query page * fix type --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	6 months ago
Karl Persson	7e38fd733b	Zanzana: Lazy load cached store info (#96452) ... * Lazy load cached store infos	6 months ago
Karl Persson	acf119a12c	Zanzana: resource sets on folder grants read on all children (#96127) ... * resource sets on folder grants read on all children * remove comment * Add type for consistency	7 months ago
Alexander Zobnin	910ec7e7dc	Zanzana: Use separate store for each org (#96015) ... * Move server init into server package * map store name to id * refactor model loading * pass namespace into reconcilers and collectors * refactor * Extend authz server with Read and Write methods * use new read/write in reconciler * implement server side read and write * Sync permissions for every org * handle namespace in check and list * split read and write * provide conditions * Fix client implementation * fix nil conditions * remove unused client code * use lock for store access * move type translators to common package * fix folder collector * fix store creation * remove unused AuthorizationModelId * fix server tests * fix linter	7 months ago
Karl Persson	dfa8f786d2	Zanzana: fix generic schema (#95648) ... * Change schema so that resource checks on a folder walks the tree	7 months ago
Karl Persson	e0163c93c2	Zanzana: reconcile generic schema (#95492) ... * Rename to CheckObject * Implement authz.AccessClient * Move folder tree to reconciler and use new schema * Move shared functionality to common package * Add reconciler for managed permissions and resource translations * Add support for folder resources	7 months ago
Karl Persson	bdbe12e980	Zanzana: Implement initial check and list with schema for generic resources (#95056) ... * Implement initial check with schema for generic resources * Implement List and add tests * Add namespace type and change to folder_resource name * Handle namespace grants for typed resources * Run tests as integration tests * Add support for verb in list requests	7 months ago