Re:Is Datalog a good language for authorization?
by lmeyerov on Sunday February 20, 2022 @04:08AM
(#30404342)
- potential to push policy execution pushdown to the db, such as for authing bulk oriented queries vs record level
- potential for use with RLS
- potential for analysis tools
In practice it seems boring, but in principle, interesting. I'd love to see actual staged compilation generation & integration (so no runtime service/runtime) and, for analysis, conversion to z3/SMT. We went for Casbin bc of the former, and seems a simpler leap for the latter.
- potential for use with RLS
- potential for analysis tools
In practice it seems boring, but in principle, interesting. I'd love to see actual staged compilation generation & integration (so no runtime service/runtime) and, for analysis, conversion to z3/SMT. We went for Casbin bc of the former, and seems a simpler leap for the latter.