Hacker News with Generative AI: Access Control

Gatehouse – a composable, async-friendly authorization policy framework in Rust (github.com/thepartly)
A flexible authorization library that combines role-based (RBAC), attribute-based (ABAC), and relationship-based (ReBAC) access control policies.

Rust, Authorization, Security, Access Control

76 points by hardbyte 9 days ago | 28 comments

Using your Apple device as an access card in unsupported systems (github.com/kormax)
This repository describes general status on the topic and a possible solution to allow you to use your device as an access card in UID-based access systems (without cloning, consent on behalf of maintainer will be required). In case you've already tried researching this topic, feel free to skip the Introduction section straight to The Solution.

Security, Hardware, Apple, Access Control

237 points by ValentineC 73 days ago | 102 comments

Solving Fine Grained Authorization with Incremental Computation (feldera.com)
If you've been following the security space, you've likely noticed the rise of Fine-Grained Authorization (FGA) access control models.

Security, Authorization, Access Control, Computation

13 points by gz09 76 days ago | 4 comments

Show HN: Cerbos. Open source, horizontally scalable, stateless authorization (github.com/cerbos)
Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly available APIs to make simple requests to evaluate policies and make dynamic access decisions for your application.

Open Source, Authorization, Security, Access Control, Cloud

24 points by emreb 120 days ago | 3 comments

Google Zanzibar: Implementing the Check API and Expand API Using .NET (2023) (bytefish.de)
In the previous articles we have seen how to implement a very simplified Relationship-based Access Control using a Google Zanzibar-like data model and some SQL queries. It worked good, and I quite like what we ended up with. But it doesn't let us define an effictive ACL, because at the moment we need to materialize all relations in the database.

.NET, Google Zanzibar, Access Control, Data Modeling, SQL

31 points by bytefish 193 days ago | 5 comments

Beehive lab notebook: Local-first access control (inkandswitch.com)
For local-first software to be successful in many production contexts, it needs to provide similar features without relying on a central authorization server.

Local-first Software, Access Control, Security, Decentralized Systems, Software Development

57 points by meiraleal 209 days ago | 8 comments

Unlock Articles with Paywallskip (paywallskip.com)

Web Development, Tools, Access Control, Web Scraping

55 points by francocanzani 213 days ago | 62 comments

SSH has become our universal (Unix) external access protocol (utoronto.ca)

SSH, Unix, Security, Networking, Access Control

67 points by speckx 258 days ago | 95 comments

Hoop.dev – the only access gateway with packet manipulation (github.com/hoophq)

Networking, Security, Open Source, Software, Access Control

20 points by andriosr 260 days ago | 9 comments

GitHub: Packages support for fine-grained PATs (github.com/github)