4 ms·
>"Cedar falls somewhere between OPA with its datalog (prolog) based search approach and a Zanzibar based approach." I understand the OPA from your description
by bogomipz 4y ago
>"Cedar falls somewhere between OPA with its datalog (prolog) based search approach and a Zanzibar based approach."
I understand the OPA from your description of it as a "datalog(prolog) based search approach" but you didn't characterize what the "Zanzibar based approach" is. Is there a similar short descriptive summary of its approach?
- jschorr 4y agoZanzibar is an authorization system Google built and describes in a paper [1], which uses relationships to make authorization decisions (aka ReBAC): if there exists a path of such relationships between a resource's permission and, say, a user, then the user is considered to have that permission on the resource. This structural approach to permission checking allows for high levels of scaling and low latency on checks. Disclaimer: I am the cofounder of AuthZed, where we are building an open source version of Zanzibar known as SpiceDB [2] [1] https://zanzibar.tech https://zanzibar.tech [2] https://github.com/authzed/spicedb https://github.com/authzed/spicedb