Show HN: Permit Elements- UIs to let your customers manage their own damn RBAC • Hacker News Board

Re: Show HN: Permit Elements- UIs to let your customers manage their own damn RBAC

#21

Post by dang » Thu, Jan 26, 2023, 5:40 PM UTC

Guys, you can't do promotional upvoting and commenting on HN. This is in both the site guidelines and the FAQ—that's how important it is:

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newsfaq.html

HN users are extremely vigilant about it and can usually figure out what's going, as they did here, and then they flag the posts and complain to us and use unkind words like 'spam'.

Re: Show HN: Permit Elements- UIs to let your customers manage their own damn RBAC

#22

Post by osigurdson » Thu, Jan 26, 2023, 8:27 PM UTC

orweis wrote: post #17

osigurdson wrote: post #15

Is this kind of like Auth0 but with more common features built in, or is something like auth0, AzureAD still needed in order to issue jwts?

While Auth0 is an Authentication (AuthN) solution (verify your identities and add attributes to them) - Permit.io is Permissions or Authorization (AuthZ) solution (who can do what) - and enforces the actual policy within your app (for every request). AuthZ is a needed and complimentary component on top of AuthN You pass the JWTs from your AuthN solution to permit's permit.check() function. Read more: - https://www.pe…

I guess it seems somewhat mixed as Auth0 also has some elements of RBAC but agree that it is not meant to lock down individual items - just api level. However, I think your approach of separating this out is a good idea for your product as many organizations will have already chosen an identity provider (often AzureAD). In any case, best of luck and I will check it out!

Re: Show HN: Permit Elements- UIs to let your customers manage their own damn RBAC

#23

Post by orweis » Fri, Jan 27, 2023, 9:47 AM UTC

dang wrote: post #21

Guys, you can't do promotional upvoting and commenting on HN. This is in both the site guidelines and the FAQ—that's how important it is: https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsfaq.html HN users are extremely vigilant about it and can usually figure out what's going, as they did here, and then they flag the posts and complain to us and use unkind words like 'spam'.

Hi Dang, apologize- we didn't plan anything here - simply a few friends / supporters in our community that were a little too eager to help. If we do post again, I'll figure a way to calm the enthusiasm. Also sorry fro the late reply - different timezones.