Casbin Forum runs on Casnode, the open-source Discourse-style forum. Try the Casnode demo →
Casbin Forum
AllTopicsRepliesLikes
Combining REST route RBAC and resource ownership ABAC in one model vs multiple enforcersAug 2023
Casbin

Yeah, im starting to think multiple enforcers is defintly the way to go...

Combining REST route RBAC and resource ownership ABAC in one model vs multiple enforcersAug 2023
Casbin

Hey all,
I'm struggling to come up with a combined model and policy that works for my usecase, and im wondering if infact I should just have multiple models applied one at a time?
Anyway, I'm aiming for 1) REST route based access, allow by default, certain wildcard paths only allowed by certain groups (RBAC) 2) ABAC access based on the ownership of some resources, and so far I just seem to get into a mess 😄

Casnode
This forum runs on Casnode, an open-source forum with the look and features of Discourse, built with Go and Next.js. See what it can do on the Casnode demo site.
Try the Casnode demo