TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: How to implement ABAC authorization for enterprise applications?

1 点作者 KrishnaAnaril超过 4 年前
Past couple of days I was learning a bit about ABAC policy languages and some of the libraries. One of the most starred library in Github on the topic ABAC is 'Casbin' which uses a PERM model instead of the standard XACML. I did a POC using Casbin.NET and I find it very easy to understand and implement. When discussed with our senior architect, his opinion is to use the standard specification (XACML) and recommended Authzforce. If you have experience in any of the aforesaid technologies, please share your views.

1 comment

hsluoyz超过 4 年前
I'm Casbin author. XACML is nearly 20 years old and it was a very classic ABAC implementation in the world. I used, learnt and studied it through my master and Ph.D career in the last ten years. That's part of the reason why I created Casbin 3 years ago during my Ph.D. I hope Casbin is some kind of improvement compared to XACML. XACML has been stable these years but Casbin is yound and still growing, so we can fix things that are not that good compared to XACML. Authzforce is under GPL-3, which needs to handle carefully for commercial use. Casbin is Apache 2.0. If you want to follow more famous standard, choose XACML. Otherwise choose Casbin.
评论 #26114589 未加载