Viewing profile — ogazitt

Congrats on the launch! [Disclosure: I'm one of the co-founders of Aserto, the creators of Topaz]. The problem of data filtering is indeed a huge part of building an effective auth…

If you want to try Topaz (which supports all three), check it out here [0]. We'd love to help you solve your authorization scenario :) [0] https://github.com/aserto-dev/topaz

Topaz is essentially a combination of OPA (which is used as the decision engine, with full support for Rego), and a Zanzibar-style directory, which is fairly isomorphic to what Ope…

OPA is a great tool for implementing a policy-as-code system. But if you're trying to use it for application authorization (e.g. fine-grained authz for B2B SaaS or a set of interna…

LetsGo looks really cool! Excited to see how this evolves.

Really cool to see an identity provider that's free, both in price and in friction. Nicely done!

Thanks! Yes, the days where you have to hand-roll authorization logic are (hopefully) soon to be behind us :)

Thanks! That's exactly the analogy we think of... Auth0 : AuthN :: Topaz : AuthZ :)

Thanks! Do let us know what your favorite feature is in the 0.30 release :)

Thanks! ABAC and ReBAC are indeed complementary, and you can build powerful authorization models by combining the best of these.

Thanks! "topaz test" is already pretty useful, and we hope to bring assertions into the visual console in a future release.

Thanks for the question! Those are both great projects. Topaz combines the best elements of both: * It uses OPA as its decision engine and Rego as the policy language, and supports…

Hey folks! As Topaz turns a year old, we just released a big update, including support for a new authorization schema language, a built-in visual console, REST APIs for the ReBAC d…

Thanks! Analogies are always challenging, but the Zanzibar ReBAC model fits the “opinion” and “simplicity” of REST (at least when compared to SOAP). We will definitely need the “Ra…

Good question. OPA is best suited for ABAC-centric scenarios, where your authorization logic is expressed in terms of attributes on users, objects, or environment. The ReBAC / Zanz…

Thanks! Let us know if you have any feedback!

Thanks! Would love to exchange ideas. Please feel free to join our community slack [0] or open an issue on the GitHub tracker [1]. We also accept PR's :) [0] https://www.aserto.com…

Really great context on what worked and what was perhaps overengineered. The approachability of any system by its consumers (developers in this case) is hugely important. You've do…

Would love any feedback you have on setting up Topaz, if you choose to give it a try! We built it to be useful completely standalone.

I'm Omri, one of the Aserto co-founders. Very much agree that this space is still pretty early - we all started building developer-centric authorization solutions in the last coupl…

Our design approach with Aserto has been to have a single OPA-based decision engine integrated with a built-in directory. So Topaz carries this forward. We do have a gRPC contract …