When the string is not stored in the database than in a static file? But why? The whole application data is stored in the database. When permission changes you need to store the data in standard format. The Users and Roles are also stored in the Database. So why not save the relations to the permissions also in the database? I can not pass the Casbin Config as it is to the Client.