4 ms·

Airbnb Himeji also: https://medium.com/airbnb-engineering/himeji-a-scalable-centralized-system-for-authorization-at-airbnb-341664924574 https://medium.com/airb

Airbnb Himeji also: https://medium.com/airbnb-engineering/himeji-a-scalable-centralized-system-for-authorization-at-airbnb-341664924574 https://medium.com/airbnb-engineering/himeji-a-scalable-cent...

etxm 5y ago
Casbin is another that’s pretty interesting I’ve been evaluating alongside Ory’s https://casbin.org/ https://casbin.org/
- znpy 5y ago
  Is it my impression or nowadays the emerging technology in this sense is OPA (Open Policy Agent)? It looks like a flexible system to build cross-language and cross-framework authorization systems.
  - etxm 5y ago
    I use OPA with terraform and kubernetes, but I’m looking for something for application ACLs, where I as a resource owner can assign permissions to arbitrary subjects for a resource. Does OPA support that? If so that would be very very cool.
    - rad_gruchalski 5y ago
      I think Ory Keto would be a better choice because it's easier to manage individual resources on an ad-hoc basis.
    - andyroid 5y ago
      Certainly! Application and microservice authorization is probably one of the more common use cases for OPA, and there's definitely benefits in having a unified policy engine in an organization or company.
      - etxm 5y ago
        I have only found RBAC and ABAC docs and tutorials for OPA, do you happen to know of a good source of docs for ACLs like, User A gives User B edit rights on Resource C? Update: I swear I’ve looked through the docs 20 times and I’ve never seen this use case, but of course after writing this comment I go back and immediately find what may work :-) https://www.openpolicyagent.org/docs/latest/comparison-to-other-systems/#amazon-web-services-iam https://www.openpolicyagent.org/docs/latest/comparison-to-ot...
ramraj07 5y ago
I am continuing to be amazed at how much over engineering Airbnb does for ostensibly a cleaner couch surfing broker. Like they don't actually do much even for a travel site, they have so much investment and could have easily disrupted so many different travel related Fields instead they keep over engineering software. Not sure how to feel about it (since we do kinda benefit from their busywork)
- astrange 5y ago
  They have similar incentives to Uber where their main goal is to get engineers to work for them by being interesting, and it doesn't actually have to be profitable. I think Uber also writes blog posts about architecture to trick competitors into thinking it can't be done by sharding each city into one box under someone's desk.

Airbnb Himeji also: https://medium.com/airbnb-engineering/himeji-a-scalable-centralized-system-for-authorization-at-airbnb-341664924574 https://medium.com/airbnb-engineering/himeji-a-scalable-cent...

etxm 5y ago

Casbin is another that’s pretty interesting I’ve been evaluating alongside Ory’s https://casbin.org/ https://casbin.org/

znpy 5y ago
Is it my impression or nowadays the emerging technology in this sense is OPA (Open Policy Agent)? It looks like a flexible system to build cross-language and cross-framework authorization systems.
- etxm 5y ago
  I use OPA with terraform and kubernetes, but I’m looking for something for application ACLs, where I as a resource owner can assign permissions to arbitrary subjects for a resource. Does OPA support that? If so that would be very very cool.
  - rad_gruchalski 5y ago
    I think Ory Keto would be a better choice because it's easier to manage individual resources on an ad-hoc basis.
  - andyroid 5y ago
    Certainly! Application and microservice authorization is probably one of the more common use cases for OPA, and there's definitely benefits in having a unified policy engine in an organization or company.
    - etxm 5y ago
      I have only found RBAC and ABAC docs and tutorials for OPA, do you happen to know of a good source of docs for ACLs like, User A gives User B edit rights on Resource C? Update: I swear I’ve looked through the docs 20 times and I’ve never seen this use case, but of course after writing this comment I go back and immediately find what may work :-) https://www.openpolicyagent.org/docs/latest/comparison-to-other-systems/#amazon-web-services-iam https://www.openpolicyagent.org/docs/latest/comparison-to-ot...

ramraj07 5y ago

I am continuing to be amazed at how much over engineering Airbnb does for ostensibly a cleaner couch surfing broker. Like they don't actually do much even for a travel site, they have so much investment and could have easily disrupted so many different travel related Fields instead they keep over engineering software. Not sure how to feel about it (since we do kinda benefit from their busywork)

astrange 5y ago
They have similar incentives to Uber where their main goal is to get engineers to work for them by being interesting, and it doesn't actually have to be profitable. I think Uber also writes blog posts about architecture to trick competitors into thinking it can't be done by sharding each city into one box under someone's desk.