Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar

Re:Show HN: Topaz 0.30 – OSS authz service combining the bes... by milo_a_hoffman on Monday November 06, 2023 @11:22AM (#38164626)

Today we are using OpenFGA and OPA together, as OPA does not provide a real solution managing our data and we only have a few real attribute based checks we need to make. OpenFGA is a nice data plane, but does not provide an attribute based solution, so we are http.Send integrating the two, which is not ideal.

[ Parent | on HN ]

Re:Show HN: Topaz 0.30 – OSS authz service combining the bes... by gertd on Monday November 06, 2023 @11:35AM (#38164790)

In simple terms topaz brings a rebac data solution together with OPA, so you only have to create attribute based authorization rules when really needed, to compliment the relation authorization provided by the topaz directory.

[ Parent | on HN ]

Re:Show HN: Topaz 0.30 – OSS authz service combining the bes... by milo_a_hoffman on Monday November 06, 2023 @11:38AM (#38164837)

I see it is a container based solution, is that a requirement, we (have to) run on Windows Server, can I run topaz without a container, just bare metal?

[ Parent | on HN ]

Re:Show HN: Topaz 0.30 – OSS authz service combining the bes... by gertd on Monday November 06, 2023 @11:48AM (#38164997)

You can, simply use the topazd.exe binary from the topaz_windows_x86_64.zip from the GH releases page (https://github.com/aserto-dev/topaz/releases). Note this is currently not a Windows Service, so not net start topaz. Let me know if that would be interesting.

[ Parent | on HN ]