skyrocketOoO / hrbac-dag

HRBAC-DAG

HRBAC implement using Zanzibar-Dag architecture

Feature

• Admin(all permission, only implement for check, no path or list)
• User Permission
• RBAC
• HRBAC
• Access link (same object namespace, role, no user)
• Access Inheritance
• Children role access control
• Zero trust
• Fine grained
• Multiple role
• Object *(all object | all operations) support (unsupport distinct object namespace link)
• List who has access to object
• Regex
• Temporal Constraints

Reserved words

• All: @ # ( ) : %
• Relatoion: "member" "parent" "modify-permission"
• Namespace: "role", "user"
• Name: "admin"

Development benchmark

Link