Zanzana: Support subresources for typed resources (#102470)

* Zanzana: Support subresources for folders

* refactor

* fix subresource requests

* implement listing for folders subresources

* teams subresources PoC

* re-enable tests

* use team resource def from iam

* fix tests

* remove unused code

* refactor: rename to subresource

* split resource schema

* update workspaces

* rename folder relation to subresource

* refactor: rename folder resources to subresources

* update readme

* fix listing

* rename params in subresource filter

pkg/services/accesscontrol/dualwrite/collectors.go

@@ -167,8 +167,7 @@ func managedPermissionsCollector(store db.DB, kind string) legacyTupleCollector
 				tuples[tuple.Object] = make(map[string]*openfgav1.TupleKey)
 			}
 
-			// For resource actions on folders we need to merge the tuples into one with combined
-			// group_resources.
+			// For resource actions on folders we need to merge the tuples into one with combined subresources.
 			if zanzana.IsFolderResourceTuple(tuple) {
 				key := tupleStringWithoutCondition(tuple)
 				if t, ok := tuples[tuple.Object][key]; ok {
@@ -386,8 +385,7 @@ func rolePermissionsCollector(store db.DB) legacyTupleCollector {
 				tuples[tuple.Object] = make(map[string]*openfgav1.TupleKey)
 			}
 
-			// For resource actions on folders we need to merge the tuples into one with combined
-			// group_resources.
+			// For resource actions on folders we need to merge the tuples into one with combined subresources.
 			if zanzana.IsFolderResourceTuple(tuple) {
 				key := tupleStringWithoutCondition(tuple)
 				if t, ok := tuples[tuple.Object][key]; ok {
@@ -449,8 +447,7 @@ func fixedRolePermissionsCollector(store db.DB) legacyTupleCollector {
 				tuples[tuple.Object] = make(map[string]*openfgav1.TupleKey)
 			}
 
-			// For resource actions on folders we need to merge the tuples into one with combined
-			// group_resources.
+			// For resource actions on folders we need to merge the tuples into one with combined subresources.
 			if zanzana.IsFolderResourceTuple(tuple) {
 				key := tupleStringWithoutCondition(tuple)
 				if t, ok := tuples[tuple.Object][key]; ok {

pkg/services/accesscontrol/dualwrite/resource_reconciler.go

@@ -62,7 +62,7 @@ func (r resourceReconciler) reconcile(ctx context.Context, namespace string) err
 				continue
 			}
 
-			// 4. For folder resource tuples we also need to compare the stored group_resources
+			// 4. For folder resource tuples we also need to compare the stored subresources
 			if zanzana.IsFolderResourceTuple(t) && t.String() != stored.String() {
 				deletes = append(deletes, &openfgav1.TupleKeyWithoutCondition{
 					User:     t.User,