zed-spicedb-check

You need the oc CLI, a SpiceDB PSK token, and Zed context configuration to run Zed permission checks against SpiceDB. These components ensure secure and accurate authorization verification in the Kessel stage environment.

To check workspace access using SpiceDB, this Skill executes resource lookups to verify if a specific principal has view or access permissions. It validates user access control for resources within the configured Kessel stage environment.

You can verify group membership in the Kessel stage by executing Zed permission checks against SpiceDB through this Skill. It validates whether a specific user ID is associated with a target group ID for RBAC access control.

To find accessible resources in SpiceDB, this Skill performs resource discovery to lookup all resources of a specific type that a principal has permission to access. It queries the Kessel stage environment for authorized resources.

Performing Zed authorization checks in the Kessel stage requires the oc CLI, a SpiceDB PSK token, and proper Zed context configuration. These prerequisites ensure secure and accurate permission validation against SpiceDB.