News for hackers. Stuff that matters.

A comment on OPA : Zanzibar :: SOAP : REST?.

Re:OPA : Zanzibar :: SOAP : REST? by itsronenh on Wednesday April 19, 2023 @11:32AM (#35629452)
Great post! When starting a green field project, how would you approach the choice between the two options? Are there specific use cases in which one would be preferable over the other?
[ Parent | on HN ]
Re:OPA : Zanzibar :: SOAP : REST? by ogazitt on Wednesday April 19, 2023 @11:38AM (#35629537)
Good question. OPA is best suited for ABAC-centric scenarios, where your authorization logic is expressed in terms of attributes on users, objects, or environment.

The ReBAC / Zanzibar model is more opinionated, but most use-cases seem to be pretty easily described in ReBAC.

[ Parent | on HN ]