Hi. Does OPAL sync relationship tuples to the loca...
# opal
s
Hi. Does OPAL sync relationship tuples to the local PDP? If so, is it done by default or needs configuration?
a
Hi @Shyamalan Chemmery, I'm an AI assistant for Permit.io. I'll analyze available sources and get back to you shortly.
Yes, OPAL syncs relationship tuples to the local PDP. OPAL synchronizes what Permit.io calls "facts" - which include real-time data like users, role assignments, relationship tuples, and attributes - to PDPs to contextualize policy decisions. (1) This synchronization happens automatically. OPAL streams deltas plus dynamic facts (including relationship tuples) to PDPs, guaranteeing zero-latency enforcement and read-your-own-writes consistency. (2) The OPAL Server monitors data sources and signals OPAL Clients when new data is available, ensuring that policy decisions are made based on the latest data. The PDP configuration shows that data synchronization is controlled through environment variables like
OPAL_DATA_TOPICS
(3) , which is automatically configured by the control plane. When the PDP starts up, it subscribes to data topics and begins receiving updates immediately. (8)
To learn more, see the sources I considered: [[1] Concepts / Glossary](https://docs.permit.io/overview/glossary) [[2] OPAL - an Authorization Service for Fine-Grained Permissions](https://www.permit.io/blog/introduction-to-opal) [[3] Configurations](https://docs.permit.io/concepts/pdp/configuration)
o
Hi @Shyamalan Chemmery. Note there's a difference between OPAL as an OSS project standalone and vs OPAL as part of Permit. In Permit (as the AI noted) we sync all the facts automatically for you. In OPAL, there are no facts, there's just policy as code and data as JSON documents - OPA and Cedar have no concepts like relationships or even roles...
a
Thanks for the feedback, glad I was helpful.
s
Many thanks for clarifying and for the quick response @Or Weis. The answers are very helpful.
💜 1