Constantly running into "unhandled partial" error about oso HOT 2 OPEN

Hey @IohannesArnold. Apologies for the slow response here, and for the issues you've encountered.

Is this a bug in oso or my failure to write a proper ruleset? If the latter, I think that the documentation could be clearer

It's kind of a bit of both.

It's currently a pretty big limitation/sharp edge of Polar that we'd like to remove. You're right that Polar is looking for an existential assertion, and currently the problem is the rule:

has_relation(parent: Group, "managing_group", child: Group) if
    child.managed_by.id = parent.id;

Which creates a partially-constrained variable parent which has the properties parent matches Group and parent.id = 2.

Which then goes through to the has_role rule and ends up adding more conditions, which it can't handle.

To address it, you would need to write the rule as:

has_relation(parent: Group, "managing_group", child: Group) if
    child.managed_by = parent;

which should work fine.

We'd like to improve this in future versions

from oso.

I'm running into the same issue, and the above solution by @samscott89 only works if both child.managed_by and parent are strictly identical. It's my understanding that at the moment, the Polar compares every property between the two dictionaries.

However, if one of the two dictionaries has a single property with a different value (let's say a metadata field with a timestamp, or anything else outside of the primary key), the two dictionaries won't be considered equal, and the assertion will fail.

This behaviour seems a bit limiting, considering there are many cases where you might have slightly different dictionaries (maybe one of them is a partial copy of the other, maybe it's been slightly altered before an update operation). Also, in most cases, you might not have a managed_by dictionary property but rather a string one, like manager_id, which you would want to compare to parent.id. Does that mean this use case is not supported?

Isn't there a more foolproof way of explaining to Polar how it's supposed to consider that two dictionaries are equal?

from oso.