petefein

digging around a bit, it looks like the only place an absolute path get used is in the index.html to load the initial sources (JS & CSS) - that's kind of annoying, would rather not recompile the whole thing to change one place

I'd like to run casdoor under docker, reverse proxied by nginx at a subpath of my domain (instead of a subdomain). Works, but I get 404's on the static assets - (looking for them in /static/ instead of a relative path).
I think I need to rebuild the front end with serverUrl set to my absolute path... is that right?

maybe what I needed something more like "terraform for authorization" - is that cedar or OPA?

Yeah looks like not... Maybe I'm thinking about this wrong

I'm architecting a complex multitenant data platform that spans cloud services & old school shared hosting - it requires a unified security framework that can enforce policies at both the AWS IAM and Linux kernel level (selinux, cgroups or similar)

I was recommended casbin & it looks amazing for the kind of complex policies I need (RBAC + usage credit limits, for example)

but it AIUI, it's opt-in - your program needs to explicitly check w/ casbin for auth before action, right?

In my case, I need the policies to be enforced by external services like IAM/selinux - is that doable with casbin?

the intersting question: https://discord.com/channels/1022748306096537660/1151583166449057802/1151584090642989247