SpiceDB
Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.
Why people recommend it
“Check out ReBAC and ABAC authorization models and also implementations like apache/casbin or authzed/spicedb.”
“Check out Zanzibar / SpiceDB / ReBAC and "Macaroon Auth"”
Caveats and dissent
“Make telemetry strictly opt-in then, that's really the only respectful way to do it.”
“EACL replaced SpiceDB at work for us”
Often compared with
From the makers not counted in the ranking
“before we founded AuthZed/SpiceDB”
The main pain points around using a Zanzibar-like approach (typically called Relationship-based access control) are: (1) The need to write relationships and keep them updated in the permissions database. Often, this requires writing to both the application database and the permissions database, at the same time. On the SpiceDB side, we provide a Postgres FDW [1] to make this easy IF your application data lives in Pos
“For SpiceDB, we called our version of this cache Materialize”
“we develop SpiceDB”
“Then, I'd take a look at the history of SpiceDB [2] for how we developed the system over time.”
“we develop the SpiceDB [2] and Materialize [3]”
Threads where it came up
- How we rebuilt complex permissions without migrating to Zanzibar 2 mentions
- Permission Systems for Enterprise That Scale 2 mentions
- I built a faster Notion in Rust 2 mentions
- Show HN: LatticeDB – Like SQLite but for graph databases 1 mention
- Jack Dorsey launches Buzz to combine team chat, AI agents and Git hosting 1 mention
- Better Auth is joining Vercel 1 mention
Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 9
“Make telemetry strictly opt-in then, that's really the only respectful way to do it.”
“Check out ReBAC and ABAC authorization models and also implementations like apache/casbin or authzed/spicedb.”
“built a PDS fork / prototype on ReBAC/SpiceDB”
“Technologies: Go, TypeScript, AWS, Terraform, SpiceDB, Stripe Connect, PostgreSQL, React, React Native, Claude/OpenAI APIs, Eleven Labs”
“Check out Zanzibar / SpiceDB / ReBAC and "Macaroon Auth"”
“We're using SpiceDB to implement the authorization logic and checks”
“one less network hop, so can be faster than Spice for typical workloads”
“has replaced SpiceDB at work”
“EACL replaced SpiceDB at work for us”