Hacker News with Generative AI: Access Control

Show HN: Cerbos. Open source, horizontally scalable, stateless authorization (github.com/cerbos)
Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly available APIs to make simple requests to evaluate policies and make dynamic access decisions for your application.
Google Zanzibar: Implementing the Check API and Expand API Using .NET (2023) (bytefish.de)
In the previous articles we have seen how to implement a very simplified Relationship-based Access Control using a Google Zanzibar-like data model and some SQL queries. It worked good, and I quite like what we ended up with. But it doesn't let us define an effictive ACL, because at the moment we need to materialize all relations in the database.
Beehive lab notebook: Local-first access control (inkandswitch.com)
For local-first software to be successful in many production contexts, it needs to provide similar features without relying on a central authorization server.
Unlock Articles with Paywallskip (paywallskip.com)
SSH has become our universal (Unix) external access protocol (utoronto.ca)
Hoop.dev – the only access gateway with packet manipulation (github.com/hoophq)
GitHub: Packages support for fine-grained PATs (github.com/github)
Type-Enforced Access Control with Go Generics (render.com)
Postgres Roles and Privileges (supabase.com)