Get the latest tech news
Google Zanzibar: Implementing the Check API and Expand API Using .NET (2023)
This article takes the Google Zanzibar a step further and implements the Check API and Expand API in .NET.
In the previous articles we have seen how to implement a very simplified Relationship-based Access Control using a Google Zanzibar-like data model and some SQL queries. Direct relations stored in the database ( ThisUsersetExpression), Computed Usersets ( ComputedUsersetExpression) or inherited permissions ( TupleToUsersetExpression). And now we can finally implement the Expand API to traverse the Expression Tree and evaluate the Rewrite Rules recursively.
Or read this on Hacker News