CanYou A generic policy-based authorization engine aims to support RBAC + ABAC and integrates with any Web Apps and Web APIs.