[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"project-9930":3},{"id":4,"name":5,"fullName":6,"owner":7,"repo":5,"description":8,"homepage":9,"htmlUrl":10,"language":11,"languages":10,"totalLinesOfCode":10,"stars":12,"forks":13,"watchers":14,"openIssues":15,"contributorsCount":16,"subscribersCount":16,"size":16,"stars1d":17,"stars7d":18,"stars30d":19,"stars90d":16,"forks30d":16,"starsTrendScore":20,"compositeScore":21,"rankGlobal":10,"rankLanguage":10,"license":22,"archived":23,"fork":23,"defaultBranch":24,"hasWiki":23,"hasPages":25,"topics":26,"createdAt":10,"pushedAt":10,"updatedAt":45,"readmeContent":46,"aiSummary":47,"trendingCount":16,"starSnapshotCount":16,"syncStatus":48,"lastSyncTime":49,"discoverSource":50},9930,"spicedb","authzed\u002Fspicedb","authzed","Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data","https:\u002F\u002Fauthzed.com\u002Fdocs",null,"Go",6768,398,50,98,0,1,13,69,5,79.2,"Apache License 2.0",false,"main",true,[27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44],"abac","acl","authorization","ciam","cloud-native","database","distributed-systems","entitlements","fga","fine-grained-access-control","fine-grained-authorization","kubernetes","permissions","rbac","rebac","security","security-tools","zanzibar","2026-06-12 04:00:47","\u003Ch1 align=\"center\">\n    \u003Ca href=\"https:\u002F\u002Fauthzed.com#gh-dark-mode-only\" target=\"_blank\">\n        \u003Cimg width=\"300\" src=\"https:\u002F\u002Fgithub.com\u002Fuser-attachments\u002Fassets\u002F0ebf4718-283b-4c40-b567-1d577c0a2e03\" alt=\"spicedb logo\">\n    \u003C\u002Fa>\n    \u003Ca href=\"https:\u002F\u002Fauthzed.com#gh-light-mode-only\" target=\"_blank\">\n        \u003Cimg width=\"300\" src=\"https:\u002F\u002Fgithub.com\u002Fuser-attachments\u002Fassets\u002F577a72f9-4fdd-49f8-b1d6-e53025d219b8\" alt=\"spicedb Logo\">\n    \u003C\u002Fa>\n\u003C\u002Fh1>\n\n\u003Ch3 align=\"center\">\n  SpiceDB sets the standard for authorization that \u003Ci>scales\u003C\u002Fi>.\n  \u003Cbr\u002F>\u003Cbr\u002F>Scale with\u003Cbr\u002F>\n  Traffic • Dev Velocity • Functionality • Geography\n\u003C\u002Fh3>\n\n\u003Cp align=\"center\">\n  \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Freleases\">\u003Cimg alt=\"release badge\" src=\"https:\u002F\u002Fimg.shields.io\u002Fgithub\u002Fv\u002Frelease\u002Fauthzed\u002Fspicedb?color=%236EC93F&label=latest%20release&sort=semver&style=flat-square\">\u003C\u002Fa>\n  &nbsp;\n  \u003Ca href=\"https:\u002F\u002Fhub.docker.com\u002Frepository\u002Fdocker\u002Fauthzed\u002Fspicedb\" target=\"_blank\">\u003Cimg alt=\"docker pulls badge\" src=\"https:\u002F\u002Fimg.shields.io\u002Fdocker\u002Fpulls\u002Fauthzed\u002Fspicedb?color=%23448CE6&style=flat-square\">\u003C\u002Fa>\n  &nbsp;\n  \u003Ca href=\"https:\u002F\u002Fauthzed.com\u002Fblog\u002Fgo-ecosystem\">\u003Cimg alt=\"built with Go badge\" src=\"https:\u002F\u002Fimg.shields.io\u002Fbadge\u002Fbuilt_with-Go-367B99.svg?style=flat-square\">\u003C\u002Fa>\n  &nbsp;\n  \u003Ca href=\"https:\u002F\u002Fapp.codecov.io\u002Fgh\u002Fauthzed\u002Fspicedb\">\u003Cimg alt=\"coverage\" src=\"https:\u002F\u002Fimg.shields.io\u002Fcodecov\u002Fc\u002Fgithub\u002Fauthzed\u002Fspicedb\">\u003C\u002Fa>\n  &nbsp;\n  \u003Ca href=\"https:\u002F\u002Fwww.bestpractices.dev\u002Fen\u002Fprojects\u002F6348\" target=\"_blank\">\u003Cimg alt=\"cii badge\" src=\"https:\u002F\u002Fimg.shields.io\u002Fcii\u002Fpercentage\u002F6348?style=flat-square&label=cii%20best%20practices&color=F8D44B\">\u003C\u002Fa>\n  &nbsp;\n  \u003Ca href=\"https:\u002F\u002Fsecurityscorecards.dev\u002Fviewer\u002F?uri=github.com\u002Fauthzed\u002Fspicedb\" target=\"_blank\">\u003Cimg alt=\"ssf badge\" src=\"https:\u002F\u002Fapi.securityscorecards.dev\u002Fprojects\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Fbadge\">\u003C\u002Fa>\n\u003C\u002Fp>\n\n\u003Cp align=\"center\">\n  \u003Ca href=\"https:\u002F\u002Fauthzed.com\u002Fdiscord\">\u003Cimg alt=\"discord badge\" src=\"https:\u002F\u002Fimg.shields.io\u002Fbadge\u002Fdiscord-spicedb-7289da?style=flat-square\">\u003C\u002Fa>\n\t&nbsp;\n    \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fauthzed\">\u003Cimg alt=\"twitter badge\" src=\"https:\u002F\u002Fimg.shields.io\u002Fbadge\u002Ftwitter-@authzed-1d9bf0.svg?style=flat-square\">\u003C\u002Fa>\n    &nbsp;\n    \u003Ca href=\"https:\u002F\u002Fwww.linkedin.com\u002Fcompany\u002Fauthzed\u002F\">\u003Cimg alt=\"linkedin badge\" src=\"https:\u002F\u002Fimg.shields.io\u002Fbadge\u002Flinkedin-+authzed-2D65BC.svg?style=flat-square\">\u003C\u002Fa>\n\u003C\u002Fp>\n\n\u003Cp align=\"center\">\n  \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcodespaces\u002Fnew?hide_repo_select=true&ref=main&repo=396856161\" target=\"_blank\">\u003Cimg alt=\"launch codespaces badge\" src=\"https:\u002F\u002Fimg.shields.io\u002Fbadge\u002Flaunch-Codespaces-blue?style=flat-square\">\u003C\u002Fa>\n  &nbsp;\n  \u003Ca href=\"https:\u002F\u002Fgitpod.io\u002F#https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\" target=\"_blank\">\u003Cimg alt=\"launch gitpod badge\" src=\"https:\u002F\u002Fimg.shields.io\u002Fbadge\u002FGitpod-ready--to--code-blue?style=flat-square\">\u003C\u002Fa>\n\u003C\u002Fp>\n\n## What is SpiceDB?\n\n\u003Ca href=\"https:\u002F\u002Fauthzed.com#gh-dark-mode-only\" target=\"_blank\">\u003Cimg align=\"right\" width=\"300\" src=\"https:\u002F\u002Fgithub.com\u002Fuser-attachments\u002Fassets\u002Fe0e70549-91dc-4a07-9309-2e18942a7902\" alt=\"spicedb diagram\" \u002F>\u003C\u002Fa>\n\u003Ca href=\"https:\u002F\u002Fauthzed.com#gh-light-mode-only\" target=\"_blank\">\u003Cimg align=\"right\" width=\"300\" src=\"https:\u002F\u002Fgithub.com\u002Fuser-attachments\u002Fassets\u002F97342fce-d94b-42b6-b02f-fe3958d13981\" alt=\"spicedb diagram\" \u002F>\u003C\u002Fa>\n\nSpiceDB is the most mature open source project inspired by Google's internal authorization system: [Zanzibar].\n\nAs of 2021, [broken access control became the #1 threat to web security according to OWASP][owasp].\nWith SpiceDB, platform and product teams can be be protected by answering this question easily: **\"can subject X perform action Y on resource Z?\"**\n\nSimilar to a relational database, developers define a **schema**, write data in the form of **relationships**, and then use SpiceDB's clients to issue **permission checks** in their application to determine what actions a user can take on a resource. Other queries are also possible, such as \"What can `subject` do?\" or \"Who can access `resource`?\".\n\nSpiceDB is often ran as a centralized service shared across product suites and microservice architectures.\n\nSpiceDB is focused purely on *authorization* and is designed to be fully agnostic to *authentication* solutions\u002Fidentity providers.\n\n[owasp]: https:\u002F\u002Fowasp.org\u002FTop10\u002FA01_2021-Broken_Access_Control\u002F\n\n### What is Google Zanzibar?\n\nIn 2019, Google released the paper \"[Zanzibar: Google's Consistent, Global Authorization System][zanzibar]\" providing the original inspiration for SpiceDB.\nThe paper presents the design, implementation, and deployment of, Zanzibar, Google's internal system for storing and evaluating access control lists.\nOriginally designed for [Google+ Circles][circles], Zanzibar now sits at the core Google's entire product suite (Calendar, Drive, Maps, Photos, YouTube) and powers the Google Cloud IAM service.\n\nWhile SpiceDB has gone on to innovate well beyond the functionality outlined in the paper, development of SpiceDB aims to always remain faithful to the paper's values and goals.\n\n[zanzibar]: https:\u002F\u002Fauthzed.com\u002Fzanzibar\n[circles]: https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FGoogle+#Circles\n\n### Why SpiceDB?\n\n- [**World-class engineering**][about]: painstakingly built by experts that pioneered the cloud-native ecosystem\n- [**Authentic design**][zanzibar]: mature and feature-complete implementation of Google's Zanzibar paper\n- [**Proven in production**][1M]: 5ms p95 when scaled to millions of queries\u002Fs, billions of relationships\n- [**Global consistency**][consistency]: consistency configured per-request unlocks correctness while maintaining performance\n- [**Multi-paradigm**][caveats]: caveated relationships combine the best concepts in authorization: ABAC & ReBAC\n- [**Safety in tooling**][tooling]: designs schemas with real-time validation or validate in your CI\u002FCD workflow\n- [**Reverse Indexes**][reverse-indexes]: queries for \"What can `subject` do?\", \"Who can access `resource`?\"\n\n[about]: https:\u002F\u002Fauthzed.com\u002Fwhy-authzed\n[1M]: https:\u002F\u002Fauthzed.com\u002Fblog\u002Fgoogle-scale-authorization\n[caveats]: https:\u002F\u002Fnetflixtechblog.com\u002Fabac-on-spicedb-enabling-netflixs-complex-identity-types-c118f374fa89\n[tooling]: https:\u002F\u002Fauthzed.com\u002Fdocs\u002Fspicedb\u002Fmodeling\u002Fvalidation-testing-debugging\n[reverse-indexes]: https:\u002F\u002Fauthzed.com\u002Fdocs\u002Fspicedb\u002Fgetting-started\u002Ffaq#what-is-a-reverse-index\n[consistency]: https:\u002F\u002Fauthzed.com\u002Fdocs\u002Fspicedb\u002Fconcepts\u002Fconsistency\n\n### Who uses SpiceDB?\n\nSpiceDB is a powerful tool in a variety of domains and in organizations of all sizes; we've chosen to highlight a few interesting community members:\n\n- [IBM's AI Data & Model Factory Platform](https:\u002F\u002Fyoutu.be\u002F4K2a9HcRhXA)\n- [Red Hat's Insights Platform](https:\u002F\u002Fwww.redhat.com\u002Fen\u002Ftechnologies\u002Fmanagement\u002Finsights)\n- [GitPod](https:\u002F\u002Fgithub.com\u002Fgitpod-io\u002Fgitpod\u002Fissues\u002F15632)\n- [TubiTV China (中文)](https:\u002F\u002Fzhuanlan.zhihu.com\u002Fp\u002F685603356)\n- [DMM Online Salon (日本語)](https:\u002F\u002Finside.dmm.com\u002Farticles\u002Fsalon-datebase-migration-challenges\u002F)\n\nBeyond the community, you can also read [customer stories][stories] for commercial usage of SpiceDB.\n\n[stories]: https:\u002F\u002Fauthzed.com\u002Fcustomers\n\n## Getting Started\n\n### Installing the binary\n\nBinary releases are available for Linux, macOS, and Windows on AMD64 and ARM64 architectures.\n\n[Homebrew] users for both macOS and Linux can install the latest binary releases of SpiceDB and [zed] using the official tap:\n\n```command\nbrew install authzed\u002Ftap\u002Fspicedb authzed\u002Ftap\u002Fzed\n```\n\n[Debian-based Linux] users can install SpiceDB packages by adding a new APT source:\n\n```command\nsudo apt update && sudo apt install -y curl ca-certificates gpg\ncurl https:\u002F\u002Fpkg.authzed.com\u002Fapt\u002Fgpg.key | sudo apt-key add -\nsudo echo \"deb https:\u002F\u002Fpkg.authzed.com\u002Fapt\u002F * *\" > \u002Fetc\u002Fapt\u002Fsources.list.d\u002Ffury.list\nsudo apt update && sudo apt install -y spicedb zed\n```\n\n[RPM-based Linux] users can install SpiceDB packages by adding a new YUM repository:\n\n```command\nsudo cat \u003C\u003C EOF >> \u002Fetc\u002Fyum.repos.d\u002FAuthzed-Fury.repo\n[authzed-fury]\nname=AuthZed Fury Repository\nbaseurl=https:\u002F\u002Fpkg.authzed.com\u002Fyum\u002F\nenabled=1\ngpgcheck=0\nEOF\nsudo dnf install -y spicedb zed\n```\n\n[zed]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fzed\n[homebrew]: https:\u002F\u002Fdocs.authzed.com\u002Fspicedb\u002Finstalling#brew\n[Debian-based Linux]: https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FList_of_Linux_distributions#Debian-based\n[RPM-based Linux]: https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FList_of_Linux_distributions#RPM-based\n  \n### Running a container\n\nContainer images are available for AMD64 and ARM64 architectures on the following registries:\n\n- [authzed\u002Fspicedb](https:\u002F\u002Fhub.docker.com\u002Fr\u002Fauthzed\u002Fspicedb)\n- [ghcr.io\u002Fauthzed\u002Fspicedb](https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Fpkgs\u002Fcontainer\u002Fspicedb)\n- [quay.io\u002Fauthzed\u002Fspicedb](https:\u002F\u002Fquay.io\u002Fauthzed\u002Fspicedb)\n\n[Docker] users can run the latest SpiceDB container with the following:\n\n```shell\n# expose grpc and http. http is used in the examples below.\ndocker run --rm -p 50051:50051 -p 8443:8443 authzed\u002Fspicedb serve --http-enabled true --grpc-preshared-key \"somerandomkeyhere\"\n```\n\nSpiceDB containers use [Chainguard Images] to ship the bare minimum userspace which is a huge boon to security, but can complicate debugging.\nIf you want to execute a user session into a running SpiceDB container and install packages, you can use one of our debug images.\n\nAppending `-debug` to any tag will provide you an image that has a userspace with debug tooling:\n\n```command\ndocker run --rm -ti --entrypoint sh authzed\u002Fspicedb:latest-debug\n```\n\nContainers are also available for each git commit to the `main` branch under `${REGISTRY}\u002Fauthzed\u002Fspicedb-git:${COMMIT}`.\n\n[Docker]: https:\u002F\u002Fdocs.docker.com\u002Fget-docker\u002F\n[Chainguard Images]: https:\u002F\u002Fgithub.com\u002Fchainguard-images\u002Fimages\n\n### Write your own schema and relationships\n\nNow that you have SpiceDB running, you must define your **schema** and write **relationships** that represent the permissions in your application. There are various way to do this:\n\n- Use the [client libraries].\n- Use the [hosted Playground] or [run it yourself locally]. The playground contains a set of example schemas and test data for different scenarios.\n- Use the [zed] CLI.\n- Use the [gRPC](https:\u002F\u002Fbuf.build\u002Fauthzed\u002Fapi\u002Fdocs\u002Fmain:authzed.api.v1) or the [HTTP](https:\u002F\u002Fauthzed.com\u002Fdocs\u002Fspicedb\u002Fapi\u002Fhttp-api) APIs. For example:\n  \n```shell\n    # write a schema\n    curl --location 'http:\u002F\u002Flocalhost:8443\u002Fv1\u002Fschema\u002Fwrite' \\\n    --header 'Content-Type: application\u002Fjson' \\\n    --header 'Accept: application\u002Fjson' \\\n    --header 'Authorization: Bearer somerandomkeyhere' \\\n    --data '{\n        \"schema\": \"definition user {} \\n definition folder { \\n relation parent: folder\\n relation viewer: user \\n permission view = viewer + parent->view \\n } \\n definition document {\\n relation folder: folder \\n relation viewer: user \\n permission view = viewer + folder->view \\n }\"\n    }'\n\n    # write a relationship\n    curl --location 'http:\u002F\u002Flocalhost:8443\u002Fv1\u002Frelationships\u002Fwrite' \\\n    --header 'Content-Type: application\u002Fjson' \\\n    --header 'Accept: application\u002Fjson' \\\n    --header 'Authorization: Bearer somerandomkeyhere' \\\n    --data '{\n        \"updates\": [\n            {\n                \"operation\": \"OPERATION_TOUCH\",\n                \"relationship\": {\n                    \"resource\": {\n                        \"objectType\": \"folder\",\n                        \"objectId\": \"budget\"\n                    },\n                    \"relation\": \"viewer\",\n                    \"subject\": {\n                        \"object\": {\n                            \"objectType\": \"user\",\n                            \"objectId\": \"anne\"\n                        }\n                    }\n                }\n            }\n        ]\n    }'\n```\n\nYou can follow a [guide for developing a schema] or review the the schema language [design documentation].\n\nFinally, you can watch the [SpiceDB primer video on schema development](https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=AoK0LrkGFDY).\n\n[hosted Playground]: https:\u002F\u002Fplay.authzed.com\n[run it yourself locally]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fplayground\n[Playground]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fplayground\n[guide for developing a schema]: https:\u002F\u002Fdocs.authzed.com\u002Fguides\u002Fschema\n[design documentation]: https:\u002F\u002Fdocs.authzed.com\u002Freference\u002Fschema-lang\n\n### Query the SpiceDB API\n\nYou can use the [client libraries] or the [gRPC](https:\u002F\u002Fbuf.build\u002Fauthzed\u002Fapi\u002Fdocs\u002Fmain:authzed.api.v1) and [HTTP](https:\u002F\u002Fauthzed.com\u002Fdocs\u002Fspicedb\u002Fapi\u002Fhttp-api) APIs to query SpiceDB. For example,\n\n```shell\ncurl --location 'http:\u002F\u002Flocalhost:8443\u002Fv1\u002Fpermissions\u002Fcheck' \\\n--header 'Content-Type: application\u002Fjson' \\\n--header 'Accept: application\u002Fjson' \\\n--header 'Authorization: Bearer somerandomkeyhere' \\\n--data '{\n  \"consistency\": {\n    \"minimizeLatency\": true\n  },\n  \"resource\": {\n    \"objectType\": \"folder\",\n    \"objectId\": \"budget\"\n  },\n  \"permission\": \"view\",\n  \"subject\": {\n    \"object\": {\n      \"objectType\": \"user\",\n      \"objectId\": \"anne\"\n    }\n  }\n}'\n\n\n#{\n#    \"checkedAt\": {\n#        \"token\": \"GhUKEzE3NTE1NjYwMjUwMDAwMDAwMDA=\"\n#    },\n#    \"permissionship\": \"PERMISSIONSHIP_HAS_PERMISSION\"\n#}\n\n'\n```\n\nYou can also issue queries with [zed], the official command-line client.\nThe [Playground] also has a tab for experimenting with `zed` all from within your browser.\n\n### Integrating SpiceDB into Your Application\n\nTo get an understanding of integrating an application with SpiceDB, you can follow the [Protecting Your First App] guide or review API documentation on the [Buf Registry] or [Postman].\n\n[client libraries]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fawesome-spicedb#clients\n[Protecting Your First App]: https:\u002F\u002Fdocs.authzed.com\u002Fguides\u002Ffirst-app\n[Buf Registry]: https:\u002F\u002Fbuf.build\u002Fauthzed\u002Fapi\u002Fdocs\n[Postman]: https:\u002F\u002Fwww.postman.com\u002Fauthzed\u002Fworkspace\u002Fspicedb\u002Foverview\n\n### Deploying to Production\n\nThe core SpiceDB service has been utilized in production by Authzed since 2021 so you can be confident that it is battle-tested. Moreover, it supports various datastores, including Google Cloud Spanner, CockroachDB, MySQL, and PostgreSQL. Read [this](https:\u002F\u002Fauthzed.com\u002Fdocs\u002Fspicedb\u002Fconcepts\u002Fdatastores) to learn the best practices for each.\n\nYou can choose to self-host SpiceDB, or use [AuthZed Cloud], a fully managed service. See a [comparison of the various options](https:\u002F\u002Fauthzed.com\u002Fdocs\u002Fauthzed\u002Fguides\u002Fpicking-a-product).\n\nIf you choose to self-host, we recommend deploying SpiceDB using Kubernetes. If you're only experimenting, feel free to try out one of our community-maintained [examples] for [testing SpiceDB on Kubernetes]:\n\n```command\nkubectl apply -f https:\u002F\u002Fraw.githubusercontent.com\u002Fauthzed\u002Fexamples\u002Fmain\u002Fkubernetes\u002Fexample.yaml\n```\n\nFor a more detailed guide on the SpiceDB Kubernetes Operator, see [this](https:\u002F\u002Fauthzed.com\u002Fdocs\u002Fspicedb\u002Fops\u002Foperator).\n\nFor more best practices on deploying SpiceDB, read our [best practices guide].\n\n[examples]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fexamples\n[testing SpiceDB on Kubernetes]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fexamples\u002Ftree\u002Fmain\u002Fkubernetes\n[AuthZed Cloud]: https:\u002F\u002Fauthzed.com\u002Fcloud\n[best practices guide]: https:\u002F\u002Fauthzed.com\u002Fdocs\u002Fbest-practices\n\n#### Telemetry\n\nSpiceDB collects anonymous telemetry data to help us understand how the community is using SpiceDB and to help us prioritize features. This telemetry is opt-out and can be disabled via setting `--telemetry-endpoint=\"\"`. For more information on the telemetry we collect, see [telemetry](.\u002FTELEMETRY.md).\n\n## More Resources\n\n- Ask questions via [GitHub Discussions] or our [Community Discord]\n- Read [blog posts] from the Authzed team describing the project and major announcements\n- Follow our [self-guided workshops] on usecases ranging from Updating Web Views, to Securing RAG Pipelines\n- Watch our [YouTube videos] about SpiceDB, modeling schemas, leveraging CNCF projects, and more\n- Explore the [SpiceDB Awesome List] that enumerates official and third-party projects built by the community\n- Reference [community examples] for demo environments, integration testing, CI pipelines, and writing schemas\n\n[GitHub Discussions]: https:\u002F\u002Fgithub.com\u002Forgs\u002Fauthzed\u002Fdiscussions\u002Fnew?category=q-a\n[Community Discord]: https:\u002F\u002Fauthzed.com\u002Fdiscord\n[blog posts]: https:\u002F\u002Fauthzed.com\u002Fblog\n[self-guided workshops]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fworkshops\u002F\n[SpiceDB Awesome List]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fawesome-spicedb\n[YouTube videos]: https:\u002F\u002Fwww.youtube.com\u002F@authzed\n[community examples]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fexamples\n\n## Join the Community\n\nJoin our fellow contributors from companies such as \u003Cimg alt=\"github logo\" height=\"15px\" src=\"https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Fassets\u002F343539\u002Fc05b8aef-c862-4499-bebf-0a43f3b423c4\"> GitHub, \u003Cimg alt=\"adobe logo\" height=\"15px\" src=\"https:\u002F\u002Fgithub.com\u002Fuser-attachments\u002Fassets\u002F64007fa0-f342-4eba-bc81-0e078677e918\"> Adobe, \u003Cimg alt=\"google logo\" height=\"15px\" src=\"https:\u002F\u002Fgithub.com\u002Fuser-attachments\u002Fassets\u002F15a144f4-4244-40af-be58-53ea3be46bc4\"> Google, \u003Cimg alt=\"fastly logo\" height=\"15px\" src=\"https:\u002F\u002Fgithub.com\u002Fuser-attachments\u002Fassets\u002F57f042c3-e106-4524-95b8-167acc6be16e\"> Fastly, \u003Cimg alt=\"plaid logo\" height=\"15px\" src=\"https:\u002F\u002Fgithub.com\u002Fuser-attachments\u002Fassets\u002F0678972d-b8ff-41e6-a507-7289a1ee1e94\"> Plaid, \u003Cimg alt=\"red hat logo\" height=\"15px\" src=\"https:\u002F\u002Fgithub.com\u002Fuser-attachments\u002Fassets\u002F955a6c28-3a5c-4679-8e12-b50734024be2\"> Red Hat, and \u003Cimg alt=\"reddit logo\" height=\"15px\" src=\"https:\u002F\u002Fgithub.com\u002Fuser-attachments\u002Fassets\u002F78d542f9-37f7-4d78-bf34-8aa0b0ddd12d\"> Reddit.\n\nSpiceDB is a community project where everyone is invited to participate and [feel welcomed].\nWhile the project has a technical goal, participation is not restricted to those with code contributions.\n\n[CONTRIBUTING.md] documents communication, contribution flow, legal requirements, and common tasks when contributing to the project.\n\nYou can find issues by priority: [Urgent], [High], [Medium], [Low], [Maybe].\nThere are also [good first issues].\n\nOur [documentation] is also [open source][oss-docs] if you'd like to clarify anything you find confusing.\n\n[feel welcomed]: CODE-OF-CONDUCT.md\n[CONTRIBUTING.md]: CONTRIBUTING.md\n[Urgent]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Flabels\u002Fpriority%2F0%20urgent\n[High]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Flabels\u002Fpriority%2F1%20high\n[Medium]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Flabels\u002Fpriority%2F2%20medium\n[Low]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Flabels\u002Fpriority%2F3%20low\n[Maybe]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Flabels\u002Fpriority%2F4%20maybe\n[good first issues]: https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Flabels\u002Fhint%2Fgood%20first%20issue\n[documentation]: https:\u002F\u002Fauthzed.com\u002Fdocs\n[oss-docs]: https:\u002F\u002Fgithub.com\u002Fauthzed\n\n## Acknowledgements\n\nSpiceDB is a community project fueled by contributions from both organizations and individuals.\nWe appreciate all contributions, large and small, and would like to thank all those involved.\n\nIn addition, we'd like to highlight a few notable contributions:\n\n- \u003Cimg alt=\"github logo\" height=\"15px\" src=\"https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Fassets\u002F343539\u002Fc05b8aef-c862-4499-bebf-0a43f3b423c4\"> The GitHub Authorization Team for implementing and contributing the MySQL datastore\n- \u003Cimg alt=\"netflix logo\" height=\"15px\" src=\"https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Fassets\u002F343539\u002Fe64128f0-978f-4fd6-bdd7-1ce7cb6b34b9\"> The Netflix Authorization Team for sponsoring and being a design partner for caveats\n- \u003Cimg alt=\"equinix logo\" height=\"15px\" src=\"https:\u002F\u002Fgithub.com\u002Fauthzed\u002Fspicedb\u002Fassets\u002F343539\u002F7bf706f9-910d-4902-8957-c914a7468eff\"> The Equinix Metal Team for sponsoring our benchmarking hardware\n","SpiceDB 是一个开源的、受 Google Zanzibar 启发的数据库，专门用于大规模存储和查询细粒度授权数据。它支持复杂的访问控制策略（如 ABAC 和 RBAC），并能高效处理分布式系统中的权限管理问题。该项目采用 Go 语言开发，具备高扩展性，能够随着流量、开发速度、功能需求以及地理分布的增长而灵活扩展。SpiceDB 非常适合需要实现精细权限控制的应用场景，尤其是那些在云原生环境中运行、对安全性有较高要求的服务或平台。",2,"2026-06-11 03:25:28","top_topic"]