Hacker News with Generative AI: Access Control

Google Zanzibar: Implementing the Check API and Expand API Using .NET (2023) (bytefish.de)
In the previous articles we have seen how to implement a very simplified Relationship-based Access Control using a Google Zanzibar-like data model and some SQL queries. It worked good, and I quite like what we ended up with. But it doesn't let us define an effictive ACL, because at the moment we need to materialize all relations in the database.
Beehive lab notebook: Local-first access control (inkandswitch.com)
For local-first software to be successful in many production contexts, it needs to provide similar features without relying on a central authorization server.
Unlock Articles with Paywallskip (paywallskip.com)
SSH has become our universal (Unix) external access protocol (utoronto.ca)
Hoop.dev – the only access gateway with packet manipulation (github.com/hoophq)
GitHub: Packages support for fine-grained PATs (github.com/github)
Type-Enforced Access Control with Go Generics (render.com)
Postgres Roles and Privileges (supabase.com)