Get the latest tech news
The Case for Centralizing Authorization
Why centralize authorization, what are the impediments, and how do you overcome them?
A more compact and performant approach is to use the Topaz open-source authorizer to augment OPA ABAC-style policies with native, built-in ReBAC functionality, executed against an embedded database. A single-tenant authorizer like Topaz can handle on the order of 1000 RPS for reasonable policies, ReBAC schemas, and data sizes, and can scale horizontally in a linear fashion. Furthermore, Topaz is easy to integrate at the API gateway level, which may be the only practical way to provide modern access control for legacy applications that aren’t worth re-platforming.
Or read this on Hacker News
