diff --git a/scripts/example.yaml b/scripts/example.yaml index ec76ed3..6233df4 100644 --- a/scripts/example.yaml +++ b/scripts/example.yaml @@ -72,12 +72,16 @@ weight: 30 steps: - op: "CheckBulkPermissions" checks: - - resource: "{{ .Prefix }}resource:seconddoc" + - resource: "{{ .Prefix }}resource:firstdoc" + subject: "{{ .Prefix }}user:tom" + permission: "view" + - resource: "{{ .Prefix }}resource:firstdoc" subject: "{{ .Prefix }}user:fred" - permission: "reader" + permission: "view" - resource: "{{ .Prefix }}resource:firstdoc" subject: "{{ .Prefix }}user:tom" - permission: "reader" + permission: "edit" - resource: "{{ .Prefix }}resource:firstdoc" subject: "{{ .Prefix }}user:fred" - permission: "reader" + permission: "edit" + expectNoPermission: true diff --git a/scripts/lots-of-data.yaml b/scripts/lots-of-data.yaml index b9a24e0..b27e4e7 100644 --- a/scripts/lots-of-data.yaml +++ b/scripts/lots-of-data.yaml @@ -16,6 +16,9 @@ steps: resource: {{ $.Prefix }}tenant:ps_{{ $j }} subject: {{ $.Prefix }}client:client_{{ $j }}#token relation: writer +# SpiceDB accepts at most 1000 updates per write, so the tokens go in their own write. +- op: WriteRelationships + updates: {{- range $i := enumerate 1000 }} - op: TOUCH resource: {{ $.Prefix }}client:client_{{ $j }}