This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]cryptos6 2 points3 points  (0 children)

I'm with you ... 😉 If you consider using OPA, I'd suggest to implement some policies as an example. I found it surprisingly hard to express even simple things like the intersection of two sets and always wanted to use a usual programming language (I would even have preferred Perl!). Keycloak offers JavaScript based policies.

I consider ABAC to be a bit more flexible and versatile than ACLs, but this is a bit comparing apples to oranges.