Show HN: Low-Code ABAC – Permissions even a monkey can use (on top of OPA)

https://www.permit.io/abac

by orweis • 4 years ago

33 7 4 years ago

coheneli1• 4 years ago

Looks great!

shimont• 4 years ago

congrats on the launch.. What is the added value in using Permit as oppose to just implementing ABAC on top of OPA by myself? if I implement it using Rego policies they will be in Git and managed in a GitOps way with tracking changes etc.. Ofc I understand that you aim for the permissions to be as easy as for a monkey.. Do you offer a way of auditing and tracking who made changes to permissions?

orweis2• 4 years ago

Thank you for the congrats and the good question. First of all building on your own, is a valid option- each application is a snowflake you should find what's best for you. That said, just like with cryptography, and authentication, it can be risky to roll your own. If you decide to roll on your own with OPA - I'd also recommend sticking to best practices [Gitops is just one] (checkout this talk I gave on OWASP- https://youtu.be/1_Iz0tRQCH4) , and also finding a solution for managing the authorization layer (e.g. https://opal.ac)

To this point specifically- "Do you offer a way of auditing and tracking who made changes to permissions" - Yes, check out Permit's audit-log interface

In general on top of the interfaces you get with OSS like OPA and OPAL, there are a lot more interfaces to build (e.g. audit logs, user mgmt, policy editing, approval flows, etc.) and none of them are unique to any application.

bjering1984• 4 years ago

that is cool!

gtf21• 4 years ago

This looks really cool! We recently embarked on designing our own authorisation service internally because we couldn't find something that did the sort of thing we wanted with the flexibility we needed. Looking at this, maybe we don't need to. Can we chat about it to see if it fits our needs?

orweis2• 4 years ago

Of course - You can grab time with us here: https://calendly.com/permitio

peekypeeky008• 4 years ago

Permissions are a nightmare. Great to see this

Show HN: Low-Code ABAC – Permissions even a monkey can use (on top of OPA)

Related Stories