Solving the New-Enemy Problem with SpiceDB Zookies
Learn how SpiceDB uses Zookies (consistency tokens) to solve the 'New-Enemy Problem' and ensure causal consistency in distributed relationship-based access control.
ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Learn how SpiceDB uses Zookies (consistency tokens) to solve the 'New-Enemy Problem' and ensure causal consistency in distributed relationship-based access control.
Decouple authorization from your code using Ory Keto's relation-based access control (ReBAC). Learn how to use relation tuples and the Check API to manage fine-grained permissions.
SpiceDB’s Zookies are the safety net that guarantees causal consistency in a distributed ReBAC system. Learn how to use them to prevent New‑Enemy attacks, with a concrete schema example, write‑and‑check workflow, and best‑practice checklist.
CheckPermission answers one question: does this subject have this permission on this resource? A worked schema, tuple writes, the rewrite-tree mechanism, and the mistakes that produce wrong answers.
Learn how to design recursive tuple schemas in SpiceDB, test inheritance with the spdb CLI, and evaluate latency trade‑offs for production.