Giters

contiv / auth_proxy

A proxy + UI server for Contiv which handles authentication (local users/LDAP/AD) + authorization (RBAC)

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Proposal: Support Casbin as the authorization module

hsluoyz opened this issue · comments

commented

Hi, Casbin is an authorization library that supports models like ACL, RBAC, ABAC.

Related to RBAC, Casbin has several advantages:

  1. roles can be cascaded, aka roles can have roles.
  2. support resource roles, so users have their roles and resource have their roles too. role = group here.
  3. the permission assignments (or policy in Casbin's language) can be persisted in files or database (MySQL and Cassandra).

And you can even customize your own access control model, for example, mix RBAC and ABAC together by using roles and attributes at the same time. It's very flexible.

Casbin can provide more flexibility and security than the current RBAC. I can make PR if needed. Let me know if there's any question:) Thanks.