OpenFGA
-
|
For the performance comparison, I tried OpenFGA with
Questions:
|
Beta Was this translation helpful? Give feedback.
Replies: 3 comments 3 replies
-
|
Hi @neeraj-ec, thank you for sharing your feedback and tests! You are right at the moment OpenFGA lacks proper caching, but it is on our upcoming roadmap. Performance in OpenFGA right now is heavily dependent on the model itself. May we ask you to share your model, tuples and checks with us? We'd love to be able to reproduce this and understand your model better, and based on that we may have some suggestions for the model itself or some internal tasks to improve on in OpenFGA. |
Beta Was this translation helpful? Give feedback.
-
|
Thanks @rhamzeh. We are developing a multi-tenant SaaS application where every object belongs to a tenant and permissions at tenant level controls what user can and can not do with the object. You want me to share the full version of authorization model or stripped version? If full version, I will replace the actual object and permissions to dummy names. |
Beta Was this translation helpful? Give feedback.
-
|
Sharing the stripped version of the model here. The complexity is equivalent for other type user
relations
define owner as self
define org as self
define can_edit as admin from org or owner
define can_view as member from org or owner
type network
relations
define owner as self
define org as self
define approval_requester as self
define approver as self
define can_view as owner or network_viewer from org
define can_edit as owner or network_editor from org
define can_submit_approval as network_editor from org
define can_cancel_approval as approval_requester
define can_approve as approver
define can_delete as owner or network_editor from org
type org
relations
define owner as self
define admin as self or owner
define member as self or admin
define network_editor as self or admin
define network_viewer as self or network_editor or admin
define submitter as self or admin
define can_view_network as network_viewer or submitter
type role
relations
define member as selfAbout the Model:
One specific requirement I'm not able to model is: change in permission based on certain attribute of the |
Beta Was this translation helpful? Give feedback.
-
|
With newer version of OpenFGA it shows how much it takes for each request. Below are few logs from I will also run the same test with in-memory db store and will publish the results here. |
Beta Was this translation helpful? Give feedback.
-
|
Same test ran with in-memory store. |
Beta Was this translation helpful? Give feedback.
-
|
Hi @neeraj-ec These issues where addressed in https://github.com/openfga/openfga/releases/tag/v0.3.3 Thanks for your feedback! |
Beta Was this translation helpful? Give feedback.
Hi @neeraj-ec
These issues where addressed in https://github.com/openfga/openfga/releases/tag/v0.3.3
Thanks for your feedback!