404: Page Not Found
If you navigated here from a broken link on the OpenFGA website, please open an issue on GitHub.
Otherwise, try navigating to the home page, and then find or search for the content you need from there.
If you navigated here from a broken link on the OpenFGA website, please open an issue on GitHub.
Otherwise, try navigating to the home page, and then find or search for the content you need from there.
fga.mod",id:"fgamod",level:3},{value:"Modules",id:"modules",level:3},{value:"Type Extensions",id:"type-extensions",level:3},{value:"Example",id:"example",level:2},{value:"Core",id:"core",level:3},{value:"Issue tracking",id:"issue-tracking",level:3},{value:"Wiki",id:"wiki",level:3},{value:"fga.mod",id:"fgamod-1",level:3},{value:"Putting it all together",id:"putting-it-all-together",level:3},{value:"Viewing the model",id:"viewing-the-model",level:3}];function h(e){const n={a:"a",code:"code",h1:"h1",h2:"h2",h3:"h3",header:"header",li:"li",p:"p",pre:"pre",table:"table",tbody:"tbody",td:"td",th:"th",thead:"thead",tr:"tr",ul:"ul",...(0,a.R)(),...e.components};return(0,t.jsxs)(t.Fragment,{children:[(0,t.jsx)(n.header,{children:(0,t.jsx)(n.h1,{id:"modular-models",children:"Modular Models"})}),"\n",(0,t.jsx)(s.ZE,{}),"\n",(0,t.jsx)(n.p,{children:"Authorization is application-specific. In an organization with multiple teams building different applications or modules, each team should be able to define and evolve their authorization policies independently."}),"\n",(0,t.jsx)(n.p,{children:"Modular models allows splitting your authorization model across multiple files and modules, improving upon some of the challenges that may be faced when maintaining an authorization model within a company, such as:"}),"\n",(0,t.jsxs)(n.ul,{children:["\n",(0,t.jsx)(n.li,{children:"A model can grow large and difficult to understand."}),"\n",(0,t.jsx)(n.li,{children:"As more teams begin to contribute to a model, the ownership boundaries may not be clear and code review processes might not scale."}),"\n"]}),"\n",(0,t.jsxs)(n.p,{children:["With modular models, a single model can be split across multiple files in a project and organized in a way that makes sense for the project or teams collaborating on it. For example, modular models allows ownership for reviews to be expressed using a feature like ",(0,t.jsx)(n.a,{href:"https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners",children:"GitHub's"}),", ",(0,t.jsx)(n.a,{href:"https://docs.gitlab.com/ee/user/project/codeowners/",children:"GitLab's"})," or ",(0,t.jsx)(n.a,{href:"https://docs.gitea.com/usage/code-owners",children:"Gitea's"})," code owners."]}),"\n",(0,t.jsx)(n.h2,{id:"key-concepts",children:"Key Concepts"}),"\n",(0,t.jsx)(n.h3,{id:"fgamod",children:(0,t.jsx)(n.code,{children:"fga.mod"})}),"\n",(0,t.jsxs)(n.p,{children:["The ",(0,t.jsx)(n.code,{children:"fga.mod"})," file is the project file for modular models. It specifies the schema version for the final combined model and lists the individual files that make up the modular model."]}),"\n",(0,t.jsxs)(n.table,{children:[(0,t.jsx)(n.thead,{children:(0,t.jsxs)(n.tr,{children:[(0,t.jsx)(n.th,{children:"Property"}),(0,t.jsx)(n.th,{children:"Description"})]})}),(0,t.jsxs)(n.tbody,{children:[(0,t.jsxs)(n.tr,{children:[(0,t.jsx)(n.td,{children:(0,t.jsx)(n.code,{children:"schema"})}),(0,t.jsx)(n.td,{children:"The schema version to be used for the combined model"})]}),(0,t.jsxs)(n.tr,{children:[(0,t.jsx)(n.td,{children:(0,t.jsx)(n.code,{children:"contents"})}),(0,t.jsx)(n.td,{children:"The individual files that make up the modular model"})]})]})]}),"\n",(0,t.jsx)(n.h3,{id:"modules",children:"Modules"}),"\n",(0,t.jsxs)(n.p,{children:[(0,t.jsx)(s.bU,{format:s.Ed.ShortForm})," modules define the types and relations for a specific application module or service."]}),"\n",(0,t.jsxs)(n.p,{children:["Modules are declared using the ",(0,t.jsx)(n.code,{children:"module"})," keyword in the DSL, and a module can be written across multiple files. A single file cannot have more than one module."]}),"\n",(0,t.jsx)(n.h3,{id:"type-extensions",children:"Type Extensions"}),"\n",(0,t.jsx)(n.p,{children:"As teams implement features, they might find that core types they are dependent upon might not contain all the relations they need. However, it might not make sense for these relations to be owned by the owner of that type if they aren't needed across the system."}),"\n",(0,t.jsx)(n.p,{children:"Modular models solves that problem by allowing individual types to be extended within other modules to to share those relations."}),"\n",(0,t.jsx)(n.p,{children:"The following are requirements for type extension:"}),"\n",(0,t.jsxs)(n.ul,{children:["\n",(0,t.jsx)(n.li,{children:"The extended type must exist"}),"\n",(0,t.jsx)(n.li,{children:"A single type can only be extended once per file"}),"\n",(0,t.jsx)(n.li,{children:"The relations added must not already exist, or be part of another type extension"}),"\n"]}),"\n",(0,t.jsx)(n.h2,{id:"example",children:"Example"}),"\n",(0,t.jsx)(n.p,{children:"The following example shows how an authorization model for a SaaS compny with a issue tracking and wiki software can implement modular models."}),"\n",(0,t.jsx)(n.h3,{id:"core",children:"Core"}),"\n",(0,t.jsx)(n.p,{children:"If there is a core set of types owned by a team that manages the overall identity for the company, the following provides the basics: users, organizations and groups that can be used by each product area."}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-dsl.openfga",children:"module core\n\ntype user\n\ntype organization\n relations\n define member: [user]\n define admin: [user]\n\ntype group\n relations\n define member: [user]\n"})}),"\n",(0,t.jsx)(n.h3,{id:"issue-tracking",children:"Issue tracking"}),"\n",(0,t.jsxs)(n.p,{children:["The issue tracking software separates out the project- and issue-related types into separate files. Below, we also extend the ",(0,t.jsx)(n.code,{children:"organization"})," type to add a relation specific to the issue tracking feature: the ability to authorize who can create a project."]}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-dsl.openfga",children:"module issue-tracker\n\nextend type organization\n relations\n define can_create_project: admin\n\ntype project\n relations\n define organization: [organization]\n define viewer: member from organization\n"})}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-dsl.openfga",children:"module issue-tracker\n\ntype ticket\n relations\n define project: [project]\n define owner: [user]\n"})}),"\n",(0,t.jsx)(n.h3,{id:"wiki",children:"Wiki"}),"\n",(0,t.jsxs)(n.p,{children:["The wiki model is managed in one file until it grows. We can also extend the ",(0,t.jsx)(n.code,{children:"organization"})," type again to add a relation tracking who can create a space."]}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-dsl.openfga",children:"module wiki\n\nextend type organization\n relations\n define can_create_space: admin\n\n\ntype space\n relations\n define organization: [organization]\n define can_view_pages: member from organization\n\ntype page\n relations\n define space: [space]\n define owner: [user]\n"})}),"\n",(0,t.jsx)(n.h3,{id:"fgamod-1",children:(0,t.jsx)(n.code,{children:"fga.mod"})}),"\n",(0,t.jsxs)(n.p,{children:["To deploy this model, create the ",(0,t.jsx)(n.code,{children:"fga.mod"})," manifest file, set a schema version, and list the individual module files that comprise the model."]}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-yaml",children:"schema: '1.2'\ncontents:\n - core.fga\n - issue-tracker/projects.fga\n - issue-tracker/tickets.fga\n - wiki.fga\n"})}),"\n",(0,t.jsx)(n.h3,{id:"putting-it-all-together",children:"Putting it all together"}),"\n",(0,t.jsxs)(n.p,{children:["With individual parts of the modular model in place, write the model to ",(0,t.jsx)(s.bU,{format:s.Ed.ShortForm})," and run tests against it. Below is an example of what to run in the CLI:"]}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-shell",children:"fga model write --store-id=$FGA_STORE_ID --file fga.mod\n"})}),"\n",(0,t.jsx)(n.p,{children:"This model can now be queried and have tuples written to it, just like a singular file authorization model."}),"\n",(0,t.jsx)(s.dp,{relationshipTuples:[{user:"user:anne",relation:"admin",object:"organization:acme"},{user:"organization:acme",relation:"organization",object:"space:acme"},{user:"organization:acme",relation:"organization",object:"project:acme"}],skipSetup:!0,allowedLanguages:[s.NH.JS_SDK,s.NH.GO_SDK,s.NH.DOTNET_SDK,s.NH.PYTHON_SDK,s.NH.JAVA_SDK,s.NH.CLI,s.NH.CURL]}),"\n",(0,t.jsx)(s.ou,{user:"user:anne",relation:"can_create_space",object:"organization:acme",allowed:!0}),"\n",(0,t.jsx)(n.h3,{id:"viewing-the-model",children:"Viewing the model"}),"\n",(0,t.jsxs)(n.p,{children:["When using the CLI to view the combined model DSL with ",(0,t.jsx)(n.code,{children:"fga model get --store-id=$FGA_STORE_ID"}),", the DSL is annotated with comments defining the source module and file for types, relations and conditions."]}),"\n",(0,t.jsxs)(n.p,{children:["For example, the ",(0,t.jsx)(n.code,{children:"organization"})," type shows that the type is defined in the ",(0,t.jsx)(n.code,{children:"core.fga"})," file as part of the ",(0,t.jsx)(n.code,{children:"core"})," module, the ",(0,t.jsx)(n.code,{children:"can_create_project"})," relation is defined in ",(0,t.jsx)(n.code,{children:"issue-tracker/projects.fga"})," as part of the ",(0,t.jsx)(n.code,{children:"issuer-tracker"})," module, and the ",(0,t.jsx)(n.code,{children:"can_create_space"})," relation is defined in the ",(0,t.jsx)(n.code,{children:"wiki.fga"})," file as part of the ",(0,t.jsx)(n.code,{children:"wiki"})," module."]}),"\n",(0,t.jsx)(n.pre,{children:(0,t.jsx)(n.code,{className:"language-dsl.openfga",children:"type organization # module: core, file: core.fga\n relations\n define admin: [user]\n define member: [user] or admin\n define can_create_project: admin # extended by: module: issue-tracker, file: issue-tracker/projects.fga\n define can_create_space: admin # extended by: module: wiki, file: wiki.fga\n"})})]})}function m(e={}){const{wrapper:n}={...(0,a.R)(),...e.components};return n?(0,t.jsx)(n,{...e,children:(0,t.jsx)(h,{...e})}):h(e)}}}]);
\ No newline at end of file
diff --git a/pr-preview/pr-921/assets/js/07d77440.d56e1548.js b/pr-preview/pr-921/assets/js/07d77440.d56e1548.js
new file mode 100644
index 000000000..0d38dbf14
--- /dev/null
+++ b/pr-preview/pr-921/assets/js/07d77440.d56e1548.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkopenfga_dev=self.webpackChunkopenfga_dev||[]).push([[362],{41010:e=>{e.exports=JSON.parse('{"tag":{"label":"conferences","permalink":"/pr-preview/pr-921/blog/tags/conferences","allTagsPath":"/pr-preview/pr-921/blog/tags","count":1,"unlisted":false},"listMetadata":{"permalink":"/pr-preview/pr-921/blog/tags/conferences","page":1,"postsPerPage":10,"totalPages":1,"totalCount":1,"blogDescription":"Blog","blogTitle":"Blog"}}')}}]);
\ No newline at end of file
diff --git a/pr-preview/pr-921/assets/js/0938166f.52c5476b.js b/pr-preview/pr-921/assets/js/0938166f.52c5476b.js
new file mode 100644
index 000000000..383e59ad6
--- /dev/null
+++ b/pr-preview/pr-921/assets/js/0938166f.52c5476b.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkopenfga_dev=self.webpackChunkopenfga_dev||[]).push([[1786],{1600:(e,i,t)=>{t.r(i),t.d(i,{assets:()=>g,contentTitle:()=>d,default:()=>c,frontMatter:()=>a,metadata:()=>n,toc:()=>l});const n=JSON.parse('{"id":"content/modeling/migrating/overview","title":"Model Migrations","description":"This section has guides that focus on migrating models and relations.","source":"@site/docs/content/modeling/migrating/overview.mdx","sourceDirName":"content/modeling/migrating","slug":"/modeling/migrating","permalink":"/pr-preview/pr-921/docs/modeling/migrating","draft":false,"unlisted":false,"editUrl":"https://github.com/openfga/openfga.dev/edit/main/docs/content/modeling/migrating/overview.mdx","tags":[],"version":"current","sidebarPosition":0,"frontMatter":{"id":"overview","title":"Model Migrations","slug":"/modeling/migrating","sidebar_position":0},"sidebar":"docs","previous":{"title":"Entitlements","permalink":"/pr-preview/pr-921/docs/modeling/advanced/entitlements"},"next":{"title":"Migrating Relations","permalink":"/pr-preview/pr-921/docs/modeling/migrating/migrating-relations"}}');var o=t(74848),r=t(28453),s=t(89987);const a={id:"overview",title:"Model Migrations",slug:"/modeling/migrating",sidebar_position:0},d="Content",g={},l=[];function m(e){const i={h1:"h1",header:"header",p:"p",...(0,r.R)(),...e.components};return(0,o.jsxs)(o.Fragment,{children:[(0,o.jsx)(s.ZE,{}),"\n",(0,o.jsx)(i.p,{children:"This section has guides that focus on migrating models and relations."}),"\n",(0,o.jsx)(s.rS,{title:"When to use",description:"The content in this section is useful:",listItems:["If you want to introduce changes to your existing authorization model or upgrade it to a new schema version."]}),"\n",(0,o.jsx)(i.header,{children:(0,o.jsx)(i.h1,{id:"content",children:"Content"})}),"\n",(0,o.jsx)(s.pV,{middle:[{title:"Migrating Relations",description:"A end-to-end example on renaming a relation.",to:"migrating/migrating-relations"},{title:"Migrating Models",description:"Learn how to safely update your model.",to:"migrating/migrating-models"}]})]})}function c(e={}){const{wrapper:i}={...(0,r.R)(),...e.components};return i?(0,o.jsx)(i,{...e,children:(0,o.jsx)(m,{...e})}):m(e)}}}]);
\ No newline at end of file
diff --git a/pr-preview/pr-921/assets/js/0bf6a463.ced4ddbd.js b/pr-preview/pr-921/assets/js/0bf6a463.ced4ddbd.js
new file mode 100644
index 000000000..86b7f65a2
--- /dev/null
+++ b/pr-preview/pr-921/assets/js/0bf6a463.ced4ddbd.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkopenfga_dev=self.webpackChunkopenfga_dev||[]).push([[9775],{28705:(e,t,s)=>{s.r(t),s.d(t,{assets:()=>d,contentTitle:()=>c,default:()=>p,frontMatter:()=>r,metadata:()=>i,toc:()=>l});const i=JSON.parse('{"id":"content/authorization-concepts","title":"Authorization Concepts","description":"Introduction to Authorization","source":"@site/docs/content/authorization-concepts.mdx","sourceDirName":"content","slug":"/authorization-concepts","permalink":"/pr-preview/pr-921/docs/authorization-concepts","draft":false,"unlisted":false,"editUrl":"https://github.com/openfga/openfga.dev/edit/main/docs/content/authorization-concepts.mdx","tags":[],"version":"current","sidebarPosition":1,"frontMatter":{"title":"Authorization Concepts","description":"Introduction to Authorization","sidebar_position":1,"slug":"/authorization-concepts"},"sidebar":"docs","previous":{"title":"What is OpenFGA","permalink":"/pr-preview/pr-921/docs/fga"},"next":{"title":"OpenFGA Concepts","permalink":"/pr-preview/pr-921/docs/concepts"}}');var a=s(74848),o=s(28453),n=s(89987);const r={title:"Authorization Concepts",description:"Introduction to Authorization",sidebar_position:1,slug:"/authorization-concepts"},c="Authorization Concepts",d={},l=[{value:"Authentication and Authorization",id:"authentication-and-authorization",level:2},{value:"What is Fine-Grained Authorization?",id:"what-is-fine-grained-authorization",level:2},{value:"What is Role-Based Access Control?",id:"what-is-role-based-access-control",level:2},{value:"What is Attribute-Based Access Control?",id:"what-is-attribute-based-access-control",level:2},{value:"What is Policy-Based Access Control?",id:"what-is-policy-based-access-control",level:2},{value:"What is Relationship-Based Access Control?",id:"what-is-relationship-based-access-control",level:2},{value:"What is Zanzibar?",id:"what-is-zanzibar",level:2}];function h(e){const t={a:"a",code:"code",em:"em",h1:"h1",h2:"h2",header:"header",p:"p",...(0,o.R)(),...e.components};return(0,a.jsxs)(a.Fragment,{children:[(0,a.jsx)(t.header,{children:(0,a.jsx)(t.h1,{id:"authorization-concepts",children:"Authorization Concepts"})}),"\n",(0,a.jsx)(t.h2,{id:"authentication-and-authorization",children:"Authentication and Authorization"}),"\n",(0,a.jsxs)(t.p,{children:[(0,a.jsx)(t.a,{href:"https://en.wikipedia.org/wiki/Authentication",children:"Authentication"})," ensures a user's identity. ",(0,a.jsx)(t.a,{href:"https://en.wikipedia.org/wiki/Authorization",children:"Authorization"})," determines if a user can perform a certain action on a particular resource."]}),"\n",(0,a.jsx)(t.p,{children:"For example, when you log in to Google, Authentication is the process of verifying that your username and password are correct. Authorization is the process of ensuring that you can access a given Google service or feature."}),"\n",(0,a.jsx)(t.h2,{id:"what-is-fine-grained-authorization",children:"What is Fine-Grained Authorization?"}),"\n",(0,a.jsx)(t.p,{children:"Fine-Grained Authorization (FGA) implies the ability to grant specific users permission to perform certain actions in specific resources."}),"\n",(0,a.jsx)(t.p,{children:"Well-designed FGA systems allow you to manage permissions for millions of objects and users. These permissions can change rapidly as a system continually adds objects and updates access permissions for its users."}),"\n",(0,a.jsx)(t.p,{children:"A notable example of FGA is Google Drive: access can be granted either to documents or to folders, as well as to individual users or users as a group, and access rights regularly change as new documents are created and shared with specific users or groups."}),"\n",(0,a.jsx)(t.h2,{id:"what-is-role-based-access-control",children:"What is Role-Based Access Control?"}),"\n",(0,a.jsxs)(t.p,{children:["In ",(0,a.jsx)(t.a,{href:"https://en.wikipedia.org/wiki/Role-based_access_control",children:"Role-Based Access Control"})," (RBAC), permissions are assigned to users based on their role in a system. For example, a user needs the ",(0,a.jsx)(t.code,{children:"editor"})," role to edit content."]}),"\n",(0,a.jsx)(t.p,{children:"RBAC systems enable you to define users, groups, roles, and permissions, then store them in a centralized location. Applications access that information to make authorization decisions."}),"\n",(0,a.jsx)(t.h2,{id:"what-is-attribute-based-access-control",children:"What is Attribute-Based Access Control?"}),"\n",(0,a.jsxs)(t.p,{children:["In ",(0,a.jsx)(t.a,{href:"https://en.wikipedia.org/wiki/Attribute-based_access_control",children:"Attribute-Based Access Control"})," (ABAC), permissions are granted based on a set of attributes that a user or resource possesses. For example, a user assigned both ",(0,a.jsx)(t.code,{children:"marketing"})," and ",(0,a.jsx)(t.code,{children:"manager"})," attributes is entitled to publish and delete posts that have a ",(0,a.jsx)(t.code,{children:"marketing"})," attribute."]}),"\n",(0,a.jsx)(t.p,{children:"Applications implementing ABAC need to retrieve information stored in multiple data sources - like RBAC services, user directories, and application-specific data sources - to make authorization decisions."}),"\n",(0,a.jsx)(t.h2,{id:"what-is-policy-based-access-control",children:"What is Policy-Based Access Control?"}),"\n",(0,a.jsx)(t.p,{children:"Policy-Based Access Control (PBAC) is the ability to manage authorization policies in a centralized way that\u2019s external to the application code. Most implementations of ABAC are also PBAC."}),"\n",(0,a.jsx)(t.h2,{id:"what-is-relationship-based-access-control",children:"What is Relationship-Based Access Control?"}),"\n",(0,a.jsxs)(t.p,{children:[(0,a.jsx)(t.a,{href:"https://en.wikipedia.org/wiki/Relationship-based_access_control",children:"Relationship-Based Access Control"})," (ReBAC) enables user access rules to be conditional on relations that a given user has with a given object ",(0,a.jsx)(t.em,{children:"and"})," that object's relationship with other objects. For example, a given user can view a given document if the user has access to the document's parent folder."]}),"\n",(0,a.jsx)(t.p,{children:"ReBAC is a superset of RBAC: you can fully implement RBAC with ReBAC.\nReBAC also lets you natively solve for ABAC when attributes can be expressed in the form of relationships. For example \u2018a user\u2019s manager\u2019, \u2018the parent folder\u2019, \u2018the owner of a document\u2019, \u2018the user\u2019s department\u2019 can be defined as relationships."}),"\n",(0,a.jsxs)(t.p,{children:[(0,a.jsx)(n.bU,{format:n.Ed.ShortForm})," extends ReBAC by making it simpler to express additional ABAC scenarios using ",(0,a.jsx)(t.a,{href:"/pr-preview/pr-921/docs/modeling/conditions",children:"Conditions"})," or ",(0,a.jsx)(t.a,{href:"/pr-preview/pr-921/docs/modeling/token-claims-contextual-tuples",children:"Contextual Tuples"}),"."]}),"\n",(0,a.jsx)(t.p,{children:"ReBAC can also be considered PBAC, as authorization policies are centralized."}),"\n",(0,a.jsx)(t.h2,{id:"what-is-zanzibar",children:"What is Zanzibar?"}),"\n",(0,a.jsxs)(t.p,{children:[(0,a.jsx)(t.a,{href:"https://research.google/pubs/pub48190/",children:"Zanzibar"})," is Google's global authorization system across Google's product suite. It\u2019s based on ReBAC and uses object-relation-user tuples to store relationship data, then checks those relations for a match between a user and an object. For more information, see ",(0,a.jsx)(t.a,{href:"https://zanzibar.academy",children:"Zanzibar Academy"}),"."]}),"\n",(0,a.jsx)(t.p,{children:"ReBAC systems based on Zanzibar store the data necessary to make authorization decisions in a centralized database. Applications only need to call an API to make authorization decisions."}),"\n",(0,a.jsxs)(t.p,{children:[(0,a.jsx)(n.bU,{format:n.Ed.ShortForm})," is an example of a Zanzibar-based authorization system."]}),"\n",(0,a.jsx)(n.XQ,{description:"Learn about {ProductName}.",relatedLinks:[{title:"{ProductName} Concepts",description:"Learn about the {ProductName} Concepts",link:"./concepts",id:"./concepts"},{title:"Modeling: Getting Started",description:"Learn about how to get started with modeling your permission system in {ProductName}.",link:"./getting-started",id:"./getting-started"}]})]})}function p(e={}){const{wrapper:t}={...(0,o.R)(),...e.components};return t?(0,a.jsx)(t,{...e,children:(0,a.jsx)(h,{...e})}):h(e)}}}]);
\ No newline at end of file
diff --git a/pr-preview/pr-921/assets/js/116d061d.5b65e8d9.js b/pr-preview/pr-921/assets/js/116d061d.5b65e8d9.js
new file mode 100644
index 000000000..bc2265b31
--- /dev/null
+++ b/pr-preview/pr-921/assets/js/116d061d.5b65e8d9.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkopenfga_dev=self.webpackChunkopenfga_dev||[]).push([[7178],{59622:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>d,contentTitle:()=>a,default:()=>g,frontMatter:()=>p,metadata:()=>r,toc:()=>u});const r=JSON.parse('{"id":"content/getting-started/setup-openfga/overview","title":"Setup OpenFGA","description":"Setting up an OpenFGA server","source":"@site/docs/content/getting-started/setup-openfga/overview.mdx","sourceDirName":"content/getting-started/setup-openfga","slug":"/getting-started/setup-openfga/overview","permalink":"/pr-preview/pr-921/docs/getting-started/setup-openfga/overview","draft":false,"unlisted":false,"editUrl":"https://github.com/openfga/openfga.dev/edit/main/docs/content/getting-started/setup-openfga/overview.mdx","tags":[],"version":"current","sidebarPosition":1,"frontMatter":{"title":"Setup OpenFGA","description":"Setting up an OpenFGA server","sidebar_position":1,"slug":"/getting-started/setup-openfga/overview"},"sidebar":"docs","previous":{"title":"Getting Started","permalink":"/pr-preview/pr-921/docs/getting-started"},"next":{"title":"Configure OpenFGA","permalink":"/pr-preview/pr-921/docs/getting-started/setup-openfga/configure-openfga"}}');var s=n(74848),o=n(28453),i=n(89987);const p={title:"Setup OpenFGA",description:"Setting up an OpenFGA server",sidebar_position:1,slug:"/getting-started/setup-openfga/overview"},a="Setup OpenFGA",d={},u=[];function c(e){const t={h1:"h1",header:"header",p:"p",...(0,o.R)(),...e.components};return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsx)(t.header,{children:(0,s.jsx)(t.h1,{id:"setup-openfga",children:"Setup OpenFGA"})}),"\n",(0,s.jsx)(t.p,{children:"Follow the guides below to set up an OpenFGA server."}),"\n",(0,s.jsx)(i.ZE,{}),"\n",(0,s.jsx)(i.pV,{middle:[{title:"Configure an OpenFGA Server",description:"How to setup an OpenFGA server.",to:"configure-openfga"},{title:"Docker Setup Guide",description:"How to setup an OpenFGA server with Docker.",to:"docker"},{title:"Kubernetes Setup Guide",description:"How to setup an OpenFGA server with Kubernetes.",to:"kubernetes"},{title:"Setup Access Control",description:"How to enable and setup the built-in access control OpenFGA server (experimental).",to:"access-control"}]})]})}function g(e={}){const{wrapper:t}={...(0,o.R)(),...e.components};return t?(0,s.jsx)(t,{...e,children:(0,s.jsx)(c,{...e})}):c(e)}}}]);
\ No newline at end of file
diff --git a/pr-preview/pr-921/assets/js/11a254f1.bffa6c09.js b/pr-preview/pr-921/assets/js/11a254f1.bffa6c09.js
new file mode 100644
index 000000000..9326b6ed5
--- /dev/null
+++ b/pr-preview/pr-921/assets/js/11a254f1.bffa6c09.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkopenfga_dev=self.webpackChunkopenfga_dev||[]).push([[3908],{35068:(e,n,i)=>{i.r(n),i.d(n,{assets:()=>l,contentTitle:()=>o,default:()=>c,frontMatter:()=>r,metadata:()=>t,toc:()=>h});var t=i(92528),s=i(74848),a=i(28453);const r={title:"Fine Grained News - March 2024",description:"Fine Grained News",slug:"fine-grained-news-2024-03",date:new Date("2024-03-28T00:00:00.000Z"),authors:"aaguiar",tags:["newsletter"],image:"https://openfga.dev/img/og-rich-embed.png",hide_table_of_contents:!1},o="Fine Grained News",l={authorsImageUrls:[void 0]},h=[{value:"KubeCon Europe 2024 was super-busy!",id:"kubecon-europe-2024-was-super-busy",level:2},{value:"CNCF incubation",id:"cncf-incubation",level:2},{value:"New Adopters",id:"new-adopters",level:2},{value:"Community News",id:"community-news",level:2},{value:"New Releases",id:"new-releases",level:2},{value:"Transitioning from Discord to CNCF's Slack",id:"transitioning-from-discord-to-cncfs-slack",level:2},{value:"See you next month!",id:"see-you-next-month",level:2}];function d(e){const n={a:"a",h2:"h2",li:"li",p:"p",ul:"ul",...(0,a.R)(),...e.components};return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsx)(n.p,{children:"Welcome to Fine Grained News, KubeCon Edition!"}),"\n",(0,s.jsx)(n.h2,{id:"kubecon-europe-2024-was-super-busy",children:"KubeCon Europe 2024 was super-busy!"}),"\n",(0,s.jsx)(n.p,{children:"You can now watch online:"}),"\n",(0,s.jsxs)(n.ul,{children:["\n",(0,s.jsxs)(n.li,{children:["\n",(0,s.jsxs)(n.p,{children:["An AppDeveloperCon session about ",(0,s.jsx)(n.a,{href:"https://www.youtube.com/watch?v=5NkJHeToEwo",children:"Implementing Modern Cloud Native Authorization Using OpenFGA"})," where ",(0,s.jsx)(n.a,{href:"https://github.com/paulinejamin",children:"Pauline Jamin"})," and ",(0,s.jsx)(n.a,{href:"https://github.com/aaguiarz",children:"Andres Aguiar"})," go over how OpenFGA is helping Agicap to implement fine-grained authorization."]}),"\n"]}),"\n",(0,s.jsxs)(n.li,{children:["\n",(0,s.jsxs)(n.p,{children:["A 7-min Lightning Talk about ",(0,s.jsx)(n.a,{href:"https://www.youtube.com/watch?v=K7Me3OjFxJ0",children:"OpenFGA: The Cloud Native way to implement Fine Grained Authorization"}),"."]}),"\n"]}),"\n",(0,s.jsxs)(n.li,{children:["\n",(0,s.jsxs)(n.p,{children:[(0,s.jsx)(n.a,{href:"https://www.linkedin.com/in/jonathan-whitaker-5a8b2484/",children:"Jonathan Whitaker"}),"'s talk about ",(0,s.jsx)(n.a,{href:"https://www.youtube.com/watch?v=UaK1EnRgrng",children:"Federated IAM for Kubernetes with OpenFGA"}),", demoing how to use OpenFGA and KeyCloak to implement fine-grained authorization in a Kubernetes cluster, in ways it's not possible today, like giving access to a user for 90 seconds."]}),"\n"]}),"\n",(0,s.jsxs)(n.li,{children:["\n",(0,s.jsxs)(n.p,{children:["We also participated in ",(0,s.jsx)(n.a,{href:"https://app.myonvent.com/event/operator-day",children:"Canonical's Operator Day"})," sharing how Canonical is using OpenFGA, but the presentation is not online yet."]}),"\n"]}),"\n"]}),"\n",(0,s.jsx)(n.p,{children:"Also, thanks to everyone who stopped by the OpenFGA Kiosk in the Project Pavilion to share their feedback about the project or learn more about it!"}),"\n",(0,s.jsx)(n.h2,{id:"cncf-incubation",children:"CNCF incubation"}),"\n",(0,s.jsx)(n.p,{children:"As you may know, the CNCF has three stages for projects: Sandbox, Incubation, and Graduation. OpenFGA is currently a Sandbox project."}),"\n",(0,s.jsxs)(n.p,{children:["We are very happy to announce that we just ",(0,s.jsx)(n.a,{href:"https://github.com/cncf/toc/pull/1276",children:"applied for Incubation"}),"! We are excited about this step and will keep you posted on the progress."]}),"\n",(0,s.jsx)(n.h2,{id:"new-adopters",children:"New Adopters"}),"\n",(0,s.jsxs)(n.p,{children:["The OpenFGA community ",(0,s.jsx)(n.a,{href:"https://github.com/openfga/community/blob/main/ADOPTERS.md",children:"maintains a list"})," of products/projects/companies that are using OpenFGA in production. We'd like to thank thank the following adopters for adding themselves to the list in the last month:"]}),"\n",(0,s.jsxs)(n.ul,{children:["\n",(0,s.jsx)(n.li,{children:(0,s.jsx)(n.a,{href:"https://www.instill.tech/",children:"Instill AI"})}),"\n",(0,s.jsx)(n.li,{children:(0,s.jsx)(n.a,{href:"https://zuplo.com",children:"Zuplo"})}),"\n",(0,s.jsx)(n.li,{children:(0,s.jsx)(n.a,{href:"https://openobserve.ai/",children:"OpenObserve"})}),"\n",(0,s.jsx)(n.li,{children:(0,s.jsx)(n.a,{href:"https://datum.net/",children:"Datum"})}),"\n"]}),"\n",(0,s.jsx)(n.p,{children:"If you are using OpenFGA in production, please consider adding your company/project to the list."}),"\n",(0,s.jsx)(n.h2,{id:"community-news",children:"Community News"}),"\n",(0,s.jsxs)(n.ul,{children:["\n",(0,s.jsxs)(n.li,{children:["\n",(0,s.jsxs)(n.p,{children:[(0,s.jsx)(n.a,{href:"https://github.com/rhamzeh/",children:"Raghd Hamzeh"})," represented OpenFGA in an ",(0,s.jsx)(n.a,{href:"https://www.youtube.com/watch?v=VyHbFwfrf04",children:"episode on Authorizing Access"}),' within a series called "You Choose - Choose Your Own Adventure: The Treacherous Trek to Security\u201d. This episode was comparing OpenFGA with Hexa and Paralus. OpenFGA was the project viewers voted for as most interested in being featured in a demo.']}),"\n"]}),"\n",(0,s.jsxs)(n.li,{children:["\n",(0,s.jsxs)(n.p,{children:[(0,s.jsx)(n.a,{href:"https://github.com/Sambego",children:"Sam Bellen"})," published a ",(0,s.jsx)(n.a,{href:"https://github.com/Sambego/fga-drive-example/",children:"Google Drive example"})," using OpenFGA. It's a Next.js project, written in TypeScript and ready to deploy on Vercel."]}),"\n"]}),"\n",(0,s.jsxs)(n.li,{children:["\n",(0,s.jsxs)(n.p,{children:[(0,s.jsx)(n.a,{href:"https://github.com/bytefish",children:"Philipp Wagner"})," is working on a ",(0,s.jsx)(n.a,{href:"https://github.com/bytefish/gitclub-dotnet",children:".NET example"})," inspired by the Github model."]}),"\n"]}),"\n",(0,s.jsxs)(n.li,{children:["\n",(0,s.jsxs)(n.p,{children:[(0,s.jsx)(n.a,{href:"https://github.com/paulinejamin",children:"Pauline Jamin"})," and ",(0,s.jsx)(n.a,{href:"https://github.com/geoffroybraun",children:"Geoffroy Braun"})," will present about ",(0,s.jsx)(n.a,{href:"https://www.devoxx.fr/schedule/talk/?id=42356",children:"Infuser du m\xe9tier dans les autorisations avec ReBAC"})," at ",(0,s.jsx)(n.a,{href:"https://www.devoxx.fr/",children:"Devoxx France 2024"})," in April 17th."]}),"\n"]}),"\n"]}),"\n",(0,s.jsx)(n.h2,{id:"new-releases",children:"New Releases"}),"\n",(0,s.jsxs)(n.p,{children:["We just shipped a ",(0,s.jsx)(n.a,{href:"https://openfga.dev/blog/modular-models-announcement",children:"release candidate of Modular Models"}),", that makes it easy for multiple teams to collaborate in a single OpenFGA model. It requires the following components:"]}),"\n",(0,s.jsxs)(n.ul,{children:["\n",(0,s.jsx)(n.li,{children:(0,s.jsx)(n.a,{href:"https://github.com/openfga/js-sdk/releases/tag/v0.3.5",children:"OpenFGA v.1.5.1"})}),"\n",(0,s.jsx)(n.li,{children:(0,s.jsx)(n.a,{href:"https://github.com/openfga/cli/releases/tag/v0.3.0",children:"CLI v0.3.0"})}),"\n",(0,s.jsx)(n.li,{children:(0,s.jsx)(n.a,{href:"https://github.com/openfga/vscode-ext/releases/tag/v0.2.20",children:"Visual Studio Code Extension v0.2.20"})}),"\n"]}),"\n",(0,s.jsx)(n.p,{children:"We also shipped new version of our SDKs with several fixes:"}),"\n",(0,s.jsxs)(n.ul,{children:["\n",(0,s.jsxs)(n.li,{children:[(0,s.jsx)(n.a,{href:"https://github.com/openfga/js-sdk/releases/tag/v0.3.5",children:"Javascript SDK 0.3.5"}),"."]}),"\n",(0,s.jsx)(n.li,{children:(0,s.jsx)(n.a,{href:"https://github.com/openfga/go-sdk/releases/tag/v0.3.5",children:"Go SDK v0.3.5"})}),"\n",(0,s.jsx)(n.li,{children:(0,s.jsx)(n.a,{href:"https://github.com/openfga/java-sdk/releases/tag/v0.4.0",children:"Java SDK v0.4.0"})}),"\n"]}),"\n",(0,s.jsx)(n.h2,{id:"transitioning-from-discord-to-cncfs-slack",children:"Transitioning from Discord to CNCF's Slack"}),"\n",(0,s.jsxs)(n.p,{children:["As we mentioned in the last edition, we transitioned out from Discord for OpenFGA and are now using the CNCF ",(0,s.jsx)(n.a,{href:"https://cloud-native.slack.com/archives/C06G1NNH47N",children:"#openfga Slack channel"}),". If you are not part of the CNCF Slack workspace, you need to join the ",(0,s.jsx)(n.a,{href:"https://slack.cncf.io",children:"CNCF Slack"})," first."]}),"\n",(0,s.jsx)(n.h2,{id:"see-you-next-month",children:"See you next month!"}),"\n",(0,s.jsx)(n.p,{children:"Fine Grained News are published every month. If you have any feedback, want to share your OpenFGA story, or know about something that you think is worth mentioning, please let us know!"})]})}function c(e={}){const{wrapper:n}={...(0,a.R)(),...e.components};return n?(0,s.jsx)(n,{...e,children:(0,s.jsx)(d,{...e})}):d(e)}},92528:e=>{e.exports=JSON.parse('{"permalink":"/pr-preview/pr-921/blog/fine-grained-news-2024-03","source":"@site/blog/fine-grained-news-2024-03.md","title":"Fine Grained News - March 2024","description":"Fine Grained News","date":"2024-03-28T00:00:00.000Z","tags":[{"inline":true,"label":"newsletter","permalink":"/pr-preview/pr-921/blog/tags/newsletter"}],"readingTime":2.64,"hasTruncateMarker":false,"authors":[{"name":"Andres Aguiar","title":"Product Manager","url":"https://github.com/aaguiarz","imageURL":"/pr-preview/pr-921/img/blog/authors/andres.jpg","key":"aaguiar","page":null}],"frontMatter":{"title":"Fine Grained News - March 2024","description":"Fine Grained News","slug":"fine-grained-news-2024-03","date":"2024-03-28T00:00:00.000Z","authors":"aaguiar","tags":["newsletter"],"image":"https://openfga.dev/img/og-rich-embed.png","hide_table_of_contents":false},"unlisted":false,"prevItem":{"title":"Modular Models","permalink":"/pr-preview/pr-921/blog/modular-models-announcement"},"nextItem":{"title":"Fine Grained News - February 2024","permalink":"/pr-preview/pr-921/blog/fine-grained-news-2024-02"}}')}}]);
\ No newline at end of file
diff --git a/pr-preview/pr-921/assets/js/11d41818.e1b8ab33.js b/pr-preview/pr-921/assets/js/11d41818.e1b8ab33.js
new file mode 100644
index 000000000..40db7746d
--- /dev/null
+++ b/pr-preview/pr-921/assets/js/11d41818.e1b8ab33.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkopenfga_dev=self.webpackChunkopenfga_dev||[]).push([[3277],{95757:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>o,default:()=>c,frontMatter:()=>r,metadata:()=>s,toc:()=>h});var s=t(44592),i=t(74848),a=t(28453);const r={title:"Fine Grained News - April 2024",description:"Fine Grained News",slug:"fine-grained-news-2024-04",date:new Date("2024-04-30T00:00:00.000Z"),authors:"aaguiar",tags:["newsletter"],image:"https://openfga.dev/img/og-rich-embed.png",hide_table_of_contents:!1},o="Fine Grained News",l={authorsImageUrls:[void 0]},h=[{value:"New Releases!",id:"new-releases",level:2},{value:"OpenFGA Hackathon",id:"openfga-hackathon",level:2},{value:"OpenFGA Security Assessment",id:"openfga-security-assessment",level:2},{value:"What's Next",id:"whats-next",level:2},{value:"Transitioning from Discord to CNCF's Slack",id:"transitioning-from-discord-to-cncfs-slack",level:2},{value:"See you next month!",id:"see-you-next-month",level:2}];function d(e){const n={a:"a",h2:"h2",li:"li",p:"p",ul:"ul",...(0,a.R)(),...e.components};return(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(n.p,{children:"Welcome to Fine Grained News, April edition!"}),"\n",(0,i.jsx)(n.h2,{id:"new-releases",children:"New Releases!"}),"\n",(0,i.jsxs)(n.ul,{children:["\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:[(0,i.jsx)(n.a,{href:"https://openfga.dev/blog/modular-models-announcement",children:"Modular Models"})," is now part of the OpenFGA core, making it easy for multiple teams to collaborate on a single OpenFGA model. Check it out, we love the feature! :)"]}),"\n"]}),"\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:["Thanks to the help provided by the ",(0,i.jsx)(n.a,{href:"https://github.com/spring-projects/spring-security/issues/14121",children:"Spring Security team"})," there's now a ",(0,i.jsx)(n.a,{href:"https://github.com/openfga/spring-boot-starter",children:"Spring Boot Starter for OpenFGA"}),"!"]}),"\n"]}),"\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:["We shipped an OpenFGA Release Candidate with ",(0,i.jsx)(n.a,{href:"https://openfga.dev/blog/list-users-announcement",children:"a new ListUsers API"}),", that can be enabled with an experimental flag. ListUsers allows you to retrieve all the users that have a specific relation with a resource, for example, all users that can view a document."]}),"\n"]}),"\n"]}),"\n",(0,i.jsx)(n.h2,{id:"openfga-hackathon",children:"OpenFGA Hackathon"}),"\n",(0,i.jsxs)(n.p,{children:["A few weeks ago we hosted a Hackathon where multiple team members experimented new ideas around OpenFGA. You'll need to wait until the next ",(0,i.jsx)(n.a,{href:"https://github.com/openfga/community/blob/main/community-meetings.md",children:"community meeting"})," to learn more :)."]}),"\n",(0,i.jsx)(n.h2,{id:"openfga-security-assessment",children:"OpenFGA Security Assessment"}),"\n",(0,i.jsxs)(n.p,{children:["We are working with the CNCF Tag-Security team on a ",(0,i.jsx)(n.a,{href:"https://github.com/cncf/tag-security/issues/1236",children:"joint security assessment"}),", which is a step required to get accepted as a CNCF Incubation project."]}),"\n",(0,i.jsx)(n.h2,{id:"whats-next",children:"What's Next"}),"\n",(0,i.jsxs)(n.ul,{children:["\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:["In collaboration with ",(0,i.jsx)(n.a,{href:"https://github.com/le-yams",children:"Yann D'Isanto"})," we are building a ",(0,i.jsx)(n.a,{href:"https://github.com/le-yams/openfga4intellij",children:"plugin for JetBrain's IDEs"})," to allow syntax coloring and validation of OpenFGA models. Together with the ",(0,i.jsx)(n.a,{href:"https://marketplace.visualstudio.com/items?itemName=openfga.openfga-vscode",children:"Visual Studio Code integration"})," and the ",(0,i.jsx)(n.a,{href:"https://github.com/matoous/tree-sitter-fga",children:"Tree sitter grammar"})," from ",(0,i.jsx)(n.a,{href:"https://github.com/matoous/",children:"Matou\u0161 Dzivjak"})," OpenFGA will get great coverage for major IDEs and editors."]}),"\n"]}),"\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:["We'll be ",(0,i.jsx)(n.a,{href:"https://github.com/openfga/roadmap/issues/41",children:"instrumenting our SDKs"})," to provide metrics / tracing and logging through OpenTelemetry APIs."]}),"\n"]}),"\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:["We'll be adding ",(0,i.jsx)(n.a,{href:"https://github.com/openfga/roadmap/issues/54",children:"additional consistency options"})," for OpenFGA query APIs."]}),"\n"]}),"\n",(0,i.jsxs)(n.li,{children:["\n",(0,i.jsxs)(n.p,{children:["We'll be working on adding ",(0,i.jsx)(n.a,{href:"https://github.com/openfga/roadmap/issues/30",children:"authorization for OpenFGA APIs"}),"."]}),"\n"]}),"\n"]}),"\n",(0,i.jsx)(n.p,{children:"Please check the items above and let us know if you have any feedback or idea."}),"\n",(0,i.jsx)(n.h2,{id:"transitioning-from-discord-to-cncfs-slack",children:"Transitioning from Discord to CNCF's Slack"}),"\n",(0,i.jsxs)(n.p,{children:["As we mentioned in the last edition, we transitioned out from Discord for OpenFGA and are now using the CNCF ",(0,i.jsx)(n.a,{href:"https://cloud-native.slack.com/archives/C06G1NNH47N",children:"#openfga Slack channel"}),". If you are not part of the CNCF Slack workspace, you need to join the ",(0,i.jsx)(n.a,{href:"https://slack.cncf.io",children:"CNCF Slack"})," first."]}),"\n",(0,i.jsx)(n.h2,{id:"see-you-next-month",children:"See you next month!"}),"\n",(0,i.jsx)(n.p,{children:"Fine Grained News are published every month. If you have any feedback, want to share your OpenFGA story, or know about something that you think is worth mentioning, please let us know!"})]})}function c(e={}){const{wrapper:n}={...(0,a.R)(),...e.components};return n?(0,i.jsx)(n,{...e,children:(0,i.jsx)(d,{...e})}):d(e)}},44592:e=>{e.exports=JSON.parse('{"permalink":"/pr-preview/pr-921/blog/fine-grained-news-2024-04","source":"@site/blog/fine-grained-news-2024-04.md","title":"Fine Grained News - April 2024","description":"Fine Grained News","date":"2024-04-30T00:00:00.000Z","tags":[{"inline":true,"label":"newsletter","permalink":"/pr-preview/pr-921/blog/tags/newsletter"}],"readingTime":1.785,"hasTruncateMarker":false,"authors":[{"name":"Andres Aguiar","title":"Product Manager","url":"https://github.com/aaguiarz","imageURL":"/pr-preview/pr-921/img/blog/authors/andres.jpg","key":"aaguiar","page":null}],"frontMatter":{"title":"Fine Grained News - April 2024","description":"Fine Grained News","slug":"fine-grained-news-2024-04","date":"2024-04-30T00:00:00.000Z","authors":"aaguiar","tags":["newsletter"],"image":"https://openfga.dev/img/og-rich-embed.png","hide_table_of_contents":false},"unlisted":false,"prevItem":{"title":"List Users API","permalink":"/pr-preview/pr-921/blog/list-users-announcement"},"nextItem":{"title":"Modular Models","permalink":"/pr-preview/pr-921/blog/modular-models-announcement"}}')}}]);
\ No newline at end of file
diff --git a/pr-preview/pr-921/assets/js/12365047.2479b3e0.js b/pr-preview/pr-921/assets/js/12365047.2479b3e0.js
new file mode 100644
index 000000000..51c4bc3b4
--- /dev/null
+++ b/pr-preview/pr-921/assets/js/12365047.2479b3e0.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkopenfga_dev=self.webpackChunkopenfga_dev||[]).push([[7005],{66706:e=>{e.exports=JSON.parse('{"metadata":{"permalink":"/pr-preview/pr-921/blog/page/2","page":2,"postsPerPage":10,"totalPages":2,"totalCount":17,"previousPage":"/pr-preview/pr-921/blog","blogDescription":"Blog","blogTitle":"Blog"}}')}}]);
\ No newline at end of file
diff --git a/pr-preview/pr-921/assets/js/138e0e15.c4b4c28c.js b/pr-preview/pr-921/assets/js/138e0e15.c4b4c28c.js
new file mode 100644
index 000000000..1a0f3e66d
--- /dev/null
+++ b/pr-preview/pr-921/assets/js/138e0e15.c4b4c28c.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkopenfga_dev=self.webpackChunkopenfga_dev||[]).push([[4921],{41597:e=>{e.exports=JSON.parse('{"name":"@easyops-cn/docusaurus-search-local","id":"default"}')}}]);
\ No newline at end of file
diff --git a/pr-preview/pr-921/assets/js/15369573.e1089af9.js b/pr-preview/pr-921/assets/js/15369573.e1089af9.js
new file mode 100644
index 000000000..b06fe0c81
--- /dev/null
+++ b/pr-preview/pr-921/assets/js/15369573.e1089af9.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkopenfga_dev=self.webpackChunkopenfga_dev||[]).push([[4266],{10270:(e,t,i)=>{i.r(t),i.d(t,{assets:()=>d,contentTitle:()=>l,default:()=>p,frontMatter:()=>r,metadata:()=>s,toc:()=>c});const s=JSON.parse('{"id":"content/modeling/building-blocks/object-to-object-relationships","title":"Object to Object Relationships","description":"Modeling relationships between objects (e.g. folder parent of a document)","source":"@site/docs/content/modeling/building-blocks/object-to-object-relationships.mdx","sourceDirName":"content/modeling/building-blocks","slug":"/modeling/building-blocks/object-to-object-relationships","permalink":"/pr-preview/pr-921/docs/modeling/building-blocks/object-to-object-relationships","draft":false,"unlisted":false,"editUrl":"https://github.com/openfga/openfga.dev/edit/main/docs/content/modeling/building-blocks/object-to-object-relationships.mdx","tags":[],"version":"current","sidebarPosition":2,"frontMatter":{"sidebar_position":2,"slug":"/modeling/building-blocks/object-to-object-relationships","description":"Modeling relationships between objects (e.g. folder parent of a document)"},"sidebar":"docs","previous":{"title":"Concentric Relationships","permalink":"/pr-preview/pr-921/docs/modeling/building-blocks/concentric-relationships"},"next":{"title":"Usersets","permalink":"/pr-preview/pr-921/docs/modeling/building-blocks/usersets"}}');var n=i(74848),o=i(28453),a=i(89987);const r={sidebar_position:2,slug:"/modeling/building-blocks/object-to-object-relationships",description:"Modeling relationships between objects (e.g. folder parent of a document)"},l="Object to Object Relationships",d={},c=[{value:"Before you start",id:"before-you-start",level:2},{value:"Modeling user groups",id:"modeling-user-groups",level:3},{value:"