Re:Ory Keto, open source authorization server based on Googl...
by jzelinskie on Thursday April 08, 2021 @12:04PM
(#26740442)
I don't work at ORY, but I do work on a Zanzibar implementation.
Basically, what you're describing is called "GBAC".
GBAC can be great if you need the full power of a typical Graph API, but Zanzibar-like services are focused on solving the problem of finding a path between two edges[1] and doing everything you can to optimize that operation for latency.
GBAC is flexible, but at the cost of performance compared to something more structured.
Basically, what you're describing is called "GBAC". GBAC can be great if you need the full power of a typical Graph API, but Zanzibar-like services are focused on solving the problem of finding a path between two edges[1] and doing everything you can to optimize that operation for latency. GBAC is flexible, but at the cost of performance compared to something more structured.
[0]: https://docs.authzed.com/authz/what-else#gbac-graph-based-ac...
[1]: https://authzed.com/blog/identity-isnt-the-foundation/