summaryrefslogtreecommitdiff
path: root/src/authorization/mod.rs
diff options
context:
space:
mode:
authormo khan <mo@mokhan.ca>2025-07-15 16:37:08 -0600
committermo khan <mo@mokhan.ca>2025-07-17 16:30:22 -0600
commit45df4d0d9b577fecee798d672695fe24ff57fb1b (patch)
tree1b99bf645035b58e0d6db08c7a83521f41f7a75b /src/authorization/mod.rs
parentf94f79608393d4ab127db63cc41668445ef6b243 (diff)
feat: migrate from Cedar to SpiceDB authorization system
This is a major architectural change that replaces the Cedar policy-based authorization system with SpiceDB's relation-based authorization. Key changes: - Migrate from Rust to Go implementation - Replace Cedar policies with SpiceDB schema and relationships - Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks - Update build system and dependencies for Go ecosystem - Maintain Envoy integration for external authorization This change enables more flexible permission modeling through SpiceDB's Google Zanzibar inspired relation-based system, supporting complex hierarchical permissions that were difficult to express in Cedar. Breaking change: Existing Cedar policies and Rust-based configuration will no longer work and need to be migrated to SpiceDB schema.
Diffstat (limited to 'src/authorization/mod.rs')
-rw-r--r--src/authorization/mod.rs11
1 files changed, 0 insertions, 11 deletions
diff --git a/src/authorization/mod.rs b/src/authorization/mod.rs
deleted file mode 100644
index d687d53f..00000000
--- a/src/authorization/mod.rs
+++ /dev/null
@@ -1,11 +0,0 @@
-pub mod authorizer;
-pub mod cedar_authorizer;
-pub mod check_service;
-pub mod entities;
-pub mod server;
-
-pub use authorizer::Authorizer;
-pub use cedar_authorizer::CedarAuthorizer;
-pub use check_service::CheckService;
-pub use entities::{CedarEntity, EntitiesRepository};
-pub use server::Server;