2 ms·
I think its a service that acts as your roles table. So your service would query warrant with a user and an action and it would return whether that's authorized
by xmaayy 5y ago
I think its a service that acts as your roles table. So your service would query warrant with a user and an action and it would return whether that's authorized? I'm also a bit confused why someone wouldn't use something like Ory[0] at any scale where modularizing this out was important.
[0] https://github.com/ory https://github.com/ory
- kkajla 5y agoThat’s correct, Warrant would act as your authorization service, where you can store access rules for your system and check against them at runtime to protect access to your application. Roles are a common access control model, but you can model much more complex use-cases like fine-grained access control as well.
- xmaayy 5y agoSorry, w.r.t my second thought, how would this differ from something like Ory Keto[0] or Oath Keeper[1]? [0] https://github.com/ory/keto https://github.com/ory/keto [1] https://github.com/ory/oathkeeper https://github.com/ory/oathkeeper
- kkajla 5y agoKeto + Oathkeeper together seem to be similar to what Warrant provides. One of our main focuses is providing great developer experience. We're continuing to build out the tooling around this, so stay tuned!