Hi! I'm new to authz and I am investigating keto for our use-case. We need to establish multi-tenancy so that our business partners don't have access to each others' datasets. However, some datasets are available to the public. Is there a way to express that the public can read from certain datasets? (Without adding each member of the public to the "public" group.)

bucket:free_data#viewer@(group:public#member)

For now, I'm using the

*

user -- like in the quickstart -- and doing two checks: one with a UUID associated with their email address and another with

*

and ORing the results. Seems a bit awkward? Is that the idiomatic usage?

The

*

user and ORing two checks is a valid workaround until https://github.com/ory/keto/issues/263 is implemented.