Affected by GO-2023-1723 and 9 other vulnerabilities

GO-2023-1723: SpiceDB binding metrics port to untrusted networks and can leak command-line flags in github.com/authzed/spicedb

GO-2023-2166: SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb

GO-2024-2597: Integer overflow in chunking helper causes dispatching to miss elements or panic in github.com/authzed/spicedb

GO-2024-2716: SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used in github.com/authzed/spicedb

GO-2024-2939: SpiceDB exclusions can result in no permission returned when permission expected in github.com/authzed/spicedb

GO-2024-3131: SpiceDB having multiple caveats on resources of the same type may improperly result in no permission in github.com/authzed/spicedb

GO-2025-3744: SpiceDB checks involving relations with caveats can result in no permission when permission is expected in github.com/authzed/spicedb

GO-2025-4120: SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb

GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

v0

package

v0.0.1 Latest Latest Go to latest Published: Aug 23, 2021 License: Apache-2.0 Imports: 40 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/authzed/spicedb

Links

Documentation ¶

Index ¶

Constants
func NewACLServer(ds datastore.Datastore, nsm namespace.Manager, dispatch graph.Dispatcher, ...) v0.ACLServiceServer
func NewDeveloperServer(store ShareStore) v0.DeveloperServiceServer
func NewInMemoryShareStore(salt string) *inMemoryShareStore
func NewNamespaceServer(ds datastore.Datastore) v0.NamespaceServiceServer
func NewS3ShareStore(bucket string, salt string, config *aws.Config) (*s3ShareStore, error)
func NewWatchServer(ds datastore.Datastore, nsm namespace.Manager) v0.WatchServiceServer
type DevContext
- func NewDevContext(ctx context.Context, requestContext *v0.RequestContext) (*DevContext, bool, error)
type LookupStatus
type ShareStore
type SharedDataV1
type SharedDataV2

Constants ¶

View Source

const (
	DepthRemainingHeader = "authzed-depth-remaining"
	ForcedRevisionHeader = "authzed-forced-revision"
)

Variables ¶

This section is empty.

Functions ¶

func NewACLServer ¶

func NewACLServer(ds datastore.Datastore, nsm namespace.Manager, dispatch graph.Dispatcher, defaultDepth uint16) v0.ACLServiceServer

NewACLServer creates an instance of the ACL server.

func NewDeveloperServer ¶

func NewDeveloperServer(store ShareStore) v0.DeveloperServiceServer

NewDeveloperServer creates an instance of the developer server.

func NewInMemoryShareStore ¶

func NewInMemoryShareStore(salt string) *inMemoryShareStore

NewInMemoryShareStore creates a new in memory share store.

func NewNamespaceServer ¶

func NewNamespaceServer(ds datastore.Datastore) v0.NamespaceServiceServer

NewNamespaceServer creates an instance of the namespace server.

func NewS3ShareStore ¶

func NewS3ShareStore(bucket string, salt string, config *aws.Config) (*s3ShareStore, error)

NewS3ShareStore creates a new S3 share store, reading and writing the shared data to the given bucket, with the given salt for hash computation and the given config for connecting to S3 or and S3-compatible API.

func NewWatchServer ¶

func NewWatchServer(ds datastore.Datastore, nsm namespace.Manager) v0.WatchServiceServer

NewWatchServer creates an instance of the watch server.

Types ¶

type DevContext ¶

type DevContext struct {
	Datastore     datastore.Datastore
	Revision      decimal.Decimal
	Namespaces    []*v0.NamespaceDefinition
	Dispatcher    graph.Dispatcher
	RequestErrors []*v0.DeveloperError
}

DevContext holds the various helper types for running the developer calls.

func NewDevContext ¶

func NewDevContext(ctx context.Context, requestContext *v0.RequestContext) (*DevContext, bool, error)

NewDevContext creates a new DevContext from the specified request context, parsing and populating the datastore as needed.

type LookupStatus ¶

type LookupStatus int

const (
	LookupError LookupStatus = iota
	LookupNotFound
	LookupSuccess
	LookupConverted
)

type ShareStore ¶

type ShareStore interface {
	// LookupSharedByReference returns the shared data for the given reference hash, if any.
	LookupSharedByReference(reference string) (SharedDataV2, LookupStatus, error)

	// StoreShared stores the given shared playground data in the backing storage, and returns
	// its reference hash.
	StoreShared(data SharedDataV2) (string, error)
}

ShareStore defines the interface for sharing and loading shared playground files.

type SharedDataV1 ¶

type SharedDataV1 struct {
	Version          string   `json:"version"`
	NamespaceConfigs []string `json:"namespace_configs"`
	RelationTuples   string   `json:"relation_tuples"`
	ValidationYaml   string   `json:"validation_yaml"`
	AssertionsYaml   string   `json:"assertions_yaml"`
}

SharedDataV1 represents the data stored in a shared playground file.

type SharedDataV2 ¶

type SharedDataV2 struct {
	Version           string `json:"version"`
	Schema            string `json:"schema"`
	RelationshipsYaml string `json:"relationships_yaml"`
	ValidationYaml    string `json:"validation_yaml"`
	AssertionsYaml    string `json:"assertions_yaml"`
}

SharedDataV2 represents the data stored in a shared playground file.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL