alexrizvi.

This is my confusion

keep it in memory, the policy has tenant info

if there is a new signup, I add to policy and restart?

I haven't tested database adapters yet, but does they query database on each request?

There is an opensource version available for casdoor as far as I know

https://github.com/casdoor/casdoor

This is already referred for testing.

in my case, I am trying to understand rbac with domain.

And my domains are my client's.

They should have their own set of roles

and it is read on each request?

The policy is hard coded in the example and as far as I can understand, casbin does not cache the change in database?

We are in microservice arch and there are instances of app that is running parallel.

So, few services fetch the updated roles, some don't

and that seems not possible with casbin for now. ?

@sang6196 how do you manage updated policies if there are more than one instance of service?

I was under the impression that a csv file would be enough if I have to just check roles permission with static policies. However, the thing is we are b2b saas and our customers would like to create users in their account

Can casdoor integrate aws cognito?

Creating one per request is gonna be so slow.

Actually, you should think of casbin as static ruleset for roles. Casbin should authorize based on the role and matchers.

Do not put your users in policy and fetch their role in middleware and enforce.

Thank you @hsluoyz

I am considering to use it in our two application:

• One requires usual owner access, and reseller access who can access multiple accounts
• Other app is multi-tenant where domain base rbac is required.