When I use namespace that have ` ` in its name in permission Ory Community #talk-keto

When I use namespace that have `_` in its name in ...

few-tent-18088

04/05/2023, 7:44 AM

When I use namespace that have

in its name in permission model like

my_namespace

I can’t refer to it via

my-namespace

when adding our checking tuples which I need for the sake of backward compatibility with 0.7.

steep-lamp-91158

04/05/2023, 11:45 AM

you have to continue using the same namespace name you had until now

steep-lamp-91158

04/05/2023, 11:45 AM

just don't change anything

few-tent-18088

04/12/2023, 6:45 PM

What do you mean “don't change anything”? How do a specify that a namespace from the previous version exist? I can't mention it in a permission model, right? And I can’t use both permission model and specify namespaces in yaml, can I?

steep-lamp-91158

04/13/2023, 7:44 AM

ah so you want to translate

Copy code

namespaces:
  - name: my_namespace
    id: 123

into OPL? in that case just make it

Copy code

class my_namespace implements Namespace {}

in the OPL file

steep-lamp-91158

04/13/2023, 7:44 AM

so just use the same name

few-tent-18088

04/13/2023, 8:39 AM

No, I have an old (pre-permission model) namespace named like

my-namespace

and I have new namespaces that I’ve described in permission model. I don’t see a way to have backward compatibility here and use both.

few-tent-18088

04/13/2023, 8:40 AM

https://github.com/ory/keto/blob/cfaefacd7c0f7b20f6fbcd1d861b12919bcdfafc/.schema/config.schema.json#L341

few-tent-18088

04/13/2023, 8:45 AM

I see from the config schema that I can’t for example combine the old way

Copy code

namespaces:
  - id: 0
    name: my-namespace

with

Copy code

namespaces:
  location: my_model.ts

few-tent-18088

04/13/2023, 8:46 AM

Sorry for misunderstanding, I guess I wasn’t clear enough

steep-lamp-91158

04/13/2023, 10:22 AM

Yes exactly, in the location you put a file URI pointing to that file

steep-lamp-91158

04/13/2023, 10:23 AM

And the file content is just a class definition for each of your old namespaces with the exact same name

few-tent-18088

04/13/2023, 1:15 PM

But It can’t be “exact same name” if it has dashes in it, can it? What should I do in this case?

steep-lamp-91158

04/13/2023, 4:51 PM

ah I see... do you want to migrate them in some way anyway?

steep-lamp-91158

04/13/2023, 4:51 PM

but tbh, the easiest will be to just update the namespace in SQL with a hand-crafted query

steep-lamp-91158

04/13/2023, 4:54 PM

otherwise the migration would be: 1. add the new namespaces (in this case in the old format, but translatable to the new one, so without dashes) 2. write a job that uses the list API to get the relation tuples and then updates then through the batch API (insert new ones, delete old ones) 3. remove the old namespaces 4. 💰

few-tent-18088

04/13/2023, 5:25 PM

Okay, so you confirm that I need a migration, right?

steep-lamp-91158

04/13/2023, 10:43 PM

Yes in that case you need one

3 Views

Open in Slack

Previous Next