Casbin Forum runs on Casnode, the open-source Discourse-style forum. Try the Casnode demo →
Casbin Forum
AllTopicsRepliesLikes
Idiomatic RBAC recipe for handling ownership domain/tenancy without hardcoding values?Jun 2025
Casbin

The work I was doing regarding this got parked for a while so I haven't had any progress on a solution.

IIRC The solution we were heading towards was checking this outside of the policy by confirming, via data in the JWT or auth DB tables, that the subject has access to that particular Owner ID. Alternatively some sort of solution involving dynamic policies that are generated and saved for users/owners. But I can't say anything concretely yet unfortunately.

Casnode
This forum runs on Casnode, an open-source forum with the look and features of Discourse, built with Go and Next.js. See what it can do on the Casnode demo site.
Try the Casnode demo