rhamzeh
Joined 13 years ago
Joined 13 years ago
Yeah.. And how do you not do that? What are the steps to not make the data from these services available? Is it now? How can we tell? What are the services that support personalized ads anyway? All of them?
And that's not a bad thing. That's why they are communicating, so if you feel that is you and you're uncomfortable about it, you can move out and it's a win win.
Not everything should service all of us, especially not the smaller services. It's OK for places to have their own rules and them being upfront about this is a *good* thing.
You lose all that if you go directly to source.
E.g. I have Lord of the Rings: War in the North that is no longer available anywhere, yet I can still download install and play it on my devices through Steam (even on Linux, which it was not intended for)
That of course doesn't help if the game does not have an offline component, e.g. I also still have League of Legends in my Steam account, but that is unusable because the Riot servers don't allow updating/connecting from it.
Feed Link: https://feed.podbean.com/palestinedeepdive/feed.xml
Member of the OpenFGA team here.
TLDR: OpenFGA supports recursive nesting - you can find many examples (e.g. GDrive) of that in the sample stores repo [1] and the documentation.
For your case:
> "User C manages User B, who owns Object A."
In the model, that is represented by:
```
model
schema 1.1
type user relations
define manager: [user]
type folder relations
define owner: [user]
```So:
- Object A is owned by User B.
- User B is managed by User C.
- User C is managed by User D.
These can all be expressed as tuples:
```
- user: user:D, relation: manager, object: user:C
- user: user:C, relation: manager, object: user:B
- user: user:B, relation: owner, object: folder:A
```
> "User D should be able to view Object A, because User D manages User C, who manages User B, who owns Object A."
The model would become
``` model
schema 1.1
type user relations
define manager: [user]
define managed_by: manager or managed_by from manager
type folder relations
define owner: [user]
define can_view: owner or managed_by from owner
```Notice how on the folder, you cannot say `manager from manager from owner`, but you can model your way around it by adding the `managed_by` relation on the user.
You can play with this sample on the FGA Playground here [2] (give it any name to continue, note that this is publicly viewable/editable). Your use-case is similar to the expenses sample [3]
Another option the docs is warning you of is that in order to use a relation as the base of a `from`, it MUST be just a directly assigned type, for example the below is not allowed as owner has redirects (or manager from owner), so cannot be used as the base of a recursive from
```
type folder
relations
define owner: [user] or manager from owner
define can_view: owner or manager from owner
```but as you saw above, you can work around it with modeling slightly differently to reach the desired solution
In case it is easier for you, feel free to ask on our Discussions page or CNCF channel [4] as they render markdown a bit better than here on hn.
As for other AuthZ frameworks that support recursion, most of the Zanzibar[5][6] inspired ones (like what OpenFGA is) do, in fact it's one of the strong suits of a Zanzibar inspired approach to AuthZ.
[1] https://github.com/openfga/sample-stores/tree/main/stores
[2] https://play.fga.dev/stores/create/?id=01JNPQKC4TMHBW271V6N4...
[3] https://github.com/openfga/sample-stores/tree/main/stores/ex...
[4] https://openfga.dev/community
[5] Zanzibar is a Google paper from 2019 around how Google handles authorization for their products: https://research.google/pubs/zanzibar-googles-consistent-glo...
[0]: https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2777
They're politicking 101 made into 24/7 news media panic.
They're both charlatans and peddlers of lies and cheap tricks; they engage in propaganda and employ journalists who seem to believe that they're anything other than foot soldiers to stir up the masses against XYZ.
Everyone knows Fox News is trash, it's laughable when some continue to argue that CNN isn't.
Where XYZ can be anything, depending on which way the wind is blowing, sometimes it's each other, sometimes it's internal to the US, sometimes it's external
The person saying that they're only staying to murder with their families because they care about them is not a redeeming quality, and they should definitely be held accountable and not excused for their crimes.
For the record, I consider any armed person outside their home country should be considered as a terrorist and a militia and treated as such. There is no reason someone from country A should be carrying a weapon in country B and attacking people there. This is 100 times even more valid when country B has not authorized this.
> U.S. airlines avoided broad bankruptcies and cuts with the record $74 billion in government Covid-19 aid (https://skift.com/2021/07/29/federal-aid-saved-u-s-airlines-...)
Or the US semiconductor industry > Most of the money is going into industry and supporting industry investments. Of the $52.7 billion in subsidies, the bulk of that will end up going to private companies. (https://www.scientificamerican.com/article/nearly-53-billion...)
Of course there's more examples for almost any country.
I'm not debating your conclusion. I think it is spot on. I am calling out the tone though as if this was not the norm for all the mega corps/mega industries.
The problem is "nations" don't represent the people in those nations, and those in power are just as capable as big tech in to relying on scare tactics and duplicitous messaging and misleading the populace in order to push forward their own agendas.
Fighting encryption has nothing to do with "saving the children", no more than all the misguided disastrous crusades against one thing or another over the past 50 years have been about saving the children.
I come from a place where in the 2000s the religious institutions through a hissy fit about certain music and subcultures and how they must be suppressed in order to "save the children". Fighting encryption may not be religious in nature but is born out of the same need for power and control.
If the battery life was doubled (~8+ hours), that definitely would be more intriguing.
But ouch, hadn't had WiFi or sound issues on Linux since the 2009~2010 era, will not be fun to get back to that, though hopefully in a few years as the drivers mature, this would become less of an issue.
> On the most annoying side, I don't know if there is a way to configure the lid action, as it put the laptop on standby.
Even when an external display is connected? That's got to be annoying!
https://www.rhamzeh.com