acl or page lock for editing
muddydixon opened this issue · comments
Access control is required.
Because we want to create private pages that a group member can view or edit.
And we want to lock (freeze) a page.
Hi, I'm the author of casbin. It is an authorization library that supports models like ACL, RBAC, ABAC.
Related to RBAC, casbin has several advantages:
- roles can be cascaded, aka roles can have roles.
- support resource roles, so users have their roles and resource have their roles too. role = group here.
- the permission assignments (or policy in casbin's language) can be persisted in files or database.
And you can even customize your own access control model, for example, mix RBAC and ABAC together by using roles and attributes at the same time. It's very flexible.
So please consider using casbin when wiki implements access control security. Also let me know if there's any question, and I can always provide help in the code :)