Any ideas for that?
Thanks for the suggestion!
From what I understand, CasWAF is mainly a standalone reverse proxy / WAF with Casbin integration, rather than something that integrates directly with Envoy or the Kubernetes Gateway API as an authorization component.
My main goal is to enforce Casbin-based authorization at the gateway level in a cloud-native setup (Kubernetes + Gateway API + Envoy), using something like ext_authz or a similar mechanism, while keeping backend services unaware of authZ.
Is there any recommended pattern, reference architecture, or actively maintained solution for doing Casbin enforcement at the gateway layer in a Kubernetes-native environment?
For example, using Envoy external authorization with Casbin, or a Casdoor-integrated policy service.
Any guidance or best practices would be greatly appreciated.
Thank you for the answers!
I need shared applications, shared roles, and shared everything. A tenant essentially groups my users and manages company-specific attributes. If Casdoor organizations are not meant to be used for organization management in this way, then I will build my own backend for company-related metadata and identify tenants as Casdoor groups.
I am developing applications that are usable by multiple tenants. In general, tenant users have the same access rights, but they can only access their own resources (tenant isolation).
Hi! Is it possible to use UI defined roles in a custom enforcer policy without define the g rules manually? And what is the recommendation, should I use permissions or enforcer policies via the CRUD interface?
Thanks in advence!
I have another question about modeling tenants in Casdoor.
Most of my resources belong to a company, which maps well to tenants in my system. In Casdoor terms, should I model these as Organizations or User Groups?
Typically, permissions are the same across all organizations, although in the future some organizations may need custom rules.
What is the recommended best practice for this setup?
My concern with Organizations is that I need to duplicate applications, roles, and permissions per organization, which creates a lot of administrative overhead.
Would it be better to use groups and manage authorization mainly via Casbin, or is there a cleaner multi-tenant pattern for this use case?
Thanks in advance!
