Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

User Add authorization middleware #4

Open
daniel-orlov opened this issue Jul 26, 2023 · 0 comments
Open

User Add authorization middleware #4

daniel-orlov opened this issue Jul 26, 2023 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@daniel-orlov
Copy link
Owner

Is your feature request related to a problem? Please describe.
Currently, our server lacks a robust and flexible authorization mechanism. Managing access control and permissions for different users and roles is becoming increasingly complex, especially as the application grows in size and functionality. We need a solution that can handle fine-grained access control and is easy to integrate into our existing server architecture.

Describe the solution you'd like
I propose the addition of an authorization middleware based on Kasbin to our server. Kasbin is a powerful and flexible open-source library that provides support for Role-Based Access Control (RBAC) and Access Control Lists (ACL). By integrating Kasbin as a middleware, we can centralize and streamline the authorization logic, making it easier to manage and maintain access control policies.

The authorization middleware should include the following key features:

  1. Policy Management: Ability to define and manage access control policies in a structured and organized manner.
  2. RBAC Support: Support for Role-Based Access Control, allowing us to assign roles to users and manage permissions at a higher level.
  3. Policy Enforcement: Seamless enforcement of authorization policies on API endpoints and resources.

Describe alternatives you've considered
Currently, we might be using custom authorization logic or other authorization middleware. However, integrating Kasbin will provide us with a more robust and feature-rich authorization solution, with a focus on maintainability and extensibility.

Additional context
Adding the Kasbin-based authorization middleware will significantly enhance our server's security and make managing access control more manageable. Any relevant details or considerations regarding the integration, such as the choice of policy storage or policy syntax preferences, would be beneficial for further discussion.

This issue is related to #3

@daniel-orlov daniel-orlov added the enhancement New feature or request label Jul 26, 2023
@daniel-orlov daniel-orlov self-assigned this Jul 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant