Slightly OT, but is there a similar or better standard for managing authorization more focused on web applications. I see many applications still use RBAC often

Slightly OT, but is there a similar or better standard for managing authorization more focused on web applications. I see many applications still use RBAC often mixed with application logic. I'm not sure about OAuth as I don't have much experience but I think it doesn't scale to fine grained access control. ABAC seems to be a better approach but I see no mainstream implementations of it. There is a company called Axiomatics that apparently has a product but is very hard to get a hands on.