From 45df4d0d9b577fecee798d672695fe24ff57fb1b Mon Sep 17 00:00:00 2001 From: mo khan Date: Tue, 15 Jul 2025 16:37:08 -0600 Subject: feat: migrate from Cedar to SpiceDB authorization system This is a major architectural change that replaces the Cedar policy-based authorization system with SpiceDB's relation-based authorization. Key changes: - Migrate from Rust to Go implementation - Replace Cedar policies with SpiceDB schema and relationships - Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks - Update build system and dependencies for Go ecosystem - Maintain Envoy integration for external authorization This change enables more flexible permission modeling through SpiceDB's Google Zanzibar inspired relation-based system, supporting complex hierarchical permissions that were difficult to express in Cedar. Breaking change: Existing Cedar policies and Rust-based configuration will no longer work and need to be migrated to SpiceDB schema. --- mise.toml | 2 -- 1 file changed, 2 deletions(-) (limited to 'mise.toml') diff --git a/mise.toml b/mise.toml index 21f7cb80..605eedfe 100644 --- a/mise.toml +++ b/mise.toml @@ -2,5 +2,3 @@ go = "latest" grpcurl = "latest" make = "latest" -rust = "latest" -rust-analyzer = "latest" -- cgit v1.2.3