Se/featureflag-spicedb

[svenefftinge]

Description

Checks the centralizedPermissions feature-flag before accessing spicedb.

Only this commit

Summary generated by Copilot

🤖 Generated by Copilot at 3c2b8dc

This pull request implements the centralized permissions feature flag for the server component, which uses the Spicedb service to manage user, project, and organization relationships. It also updates the authorizer, relationship-updater, organization-service, and projects-service classes to use the new feature flag logic and the Spicedb queries and operations. Additionally, it adds and modifies some test cases for these classes, introduces a new metric for relationship updates, and fixes some minor typos and errors.

Related Issue(s)

Fixes EXP-366

How to test

Documentation

Preview status

Gitpod was successfully deployed to your preview environment.

• 🏷️ Name - se-featurebfacf95772
• 🔗 URL - se-featurebfacf95772.preview.gitpod-dev.com/workspaces.
• 📚 Documentation - See our internal documentation for information on how to interact with your preview environment.
• 📦 Version - se-featureflag-spicedb-gha.14683

Build Options

Build

• /werft with-werft
  Run the build with werft instead of GHA
• leeway-no-cache
• /werft no-test
  Run Leeway with --dont-test

Publish

• /werft publish-to-npm
• /werft publish-to-jb-marketplace

Installer

• analytics=segment
• with-dedicated-emulation
• workspace-feature-flags
  Add desired feature flags to the end of the line above, space separated

Preview Environment / Integration Tests

• /werft with-local-preview
  If enabled this will build install/preview
• /werft with-preview
• /werft with-large-vm
• /werft with-gce-vm
  If enabled this will create the environment on GCE infra
• with-integration-tests=all
  Valid options are all, workspace, webapp, ide, jetbrains, vscode, ssh. If enabled, with-preview and with-large-vm will be enabled.
• with-monitoring

/hold

[geropl]

Code LGTM ✔️

Would be great to test this, maybe after it got merged, in a preview env.

[svenefftinge]

I have just tested it.

• disabled the featureFlag and restarted server pod
• delete spicedb
• login, create orgs, create projects worked flawlessly

[svenefftinge]

/unhold