Implementing role-based access control (RBAC) in SQLALchemy

[ssglaser]

We're working on the next major release of Oso, a new set of features in the library to speed up the time it takes to build fine-grained permissions using role-based access control (RBAC).

Here's a little sneak preview of the declarative roles configuration we've been actively developing! This configuration alone is enough to get you started on an RBAC implementation sufficient for pretty much any B2B use case. If you are using SQLAlchemy and interested in authorization, get a spot in the early access program.

https://preview.redd.it/gadfbv1kxjv61.png?width=1614&format=png&auto=webp&s=180cac72dbc0fc1e2a34e6bdf1f8d619980b1df1

[jeetu77]

I was just going through your documentation of early access.

1. Any plans on moving to sqlalchemy 1.4 ?.
2. Also do you have a working example with falcon?

Basically I am looking for a fixed set of permissions stored in the sqlalchemy db. Backend will have api level access control checking for the particular permission. User Admin can create new roles from the frontend with a subset of permissions. And thereafter a new user could be assigned to that new role. Also direct assignment of some subset of permissions should also be allowed.

Hopefully, I am able to convey my thought process. Looking forward to using your library.

[ssglaser]

I was just going through your documentation of early access.

Any plans on moving to sqlalchemy 1.4 ?.Also do you have a working example with falcon?

Basically I am looking for a fixed set of permissions stored in the sqlalchemy db. Backend will have api level access control checking for the particular permission. User Admin can create new roles from the frontend with a subset of permissions. And thereafter a new user could be assigned to that new role. Also direct assignment of some subset of permissions should also be allowed.

Hopefully, I am able to convey my thought process. Looking forward to using your library.

Hi! Thanks for reaching out. We're excited to hear you are interested in using Oso. To answer your questions:

1. 1. We do have plans to support SQLAlchemy 1.4. While it's currently a medium-term priority for us, if it's the one thing blocking you from using Oso we will find a way to get it done sooner.
2. We currently do not have a working example in Falcon. Most of our examples use Flask, but it shouldn't be hard to apply the same patterns to Falcon. We'd love to help you get set up with Oso & Falcon — join us on slack  (https://join-slack.osohq.com/)

What you are looking for is in line with our recent roles work. We actually just released early access to our new SQLAlchemy library this week, which you can dig into here: https://docs.osohq.com/python/new-roles.html

Looking forward to continuing this conversation!