News for hackers. Stuff that matters.

A comment on Solving Fine Grained Authorization with Incremental Computation.

Re:Solving Fine Grained Authorization with Incremental Compu... by ryzhyk on Thursday January 16, 2025 @12:34PM (#42728273)
[I am the author of the blog] It's been fun working on this demo. FGA is a very cool concept, but building an efficient FGA engine is hard: you basically need to solve a graph reachability problem for each auth request.

So I tried a different approach: precompute all authorization decisions ahead of time and incrementally update the computation in real-time. As the post explains, there's not free lunch; there's a space/time tradeoff involved, but overall I think it's very promising.

[ Parent | on HN ]
Re:Solving Fine Grained Authorization with Incremental Compu... by MattPalmer1086 on Monday January 20, 2025 @03:08AM (#42766139)
Very interesting! Many years ago I implemented a mandatory access control system with complex access rules. In a similar fashion, I had to precompute authorisation, as it was just too damn slow to do it all on the fly. Not as complicated as yours, but same principle.
[ Parent | on HN ]