/hrbac-dag

Primary LanguageGoMIT LicenseMIT

HRBAC-DAG

HRBAC implement using Zanzibar-Dag architecture

Feature

  • Admin(all permission, only implement for check, no path or list)
  • User Permission
  • RBAC
  • HRBAC
  • Access link (same object namespace, role, no user)
  • Access Inheritance
  • Children role access control
  • Zero trust
  • Fine grained
  • Multiple role
  • Object *(all object | all operations) support (unsupport distinct object namespace link)
  • List who has access to object
  • Regex
  • Temporal Constraints

Reserved words

  • All: @ # ( ) : %
  • Relatoion: "member" "parent" "modify-permission"
  • Namespace: "role", "user"
  • Name: "admin"

Development benchmark

Link