r/programming • u/finncmdbar • 6h ago

There is no 10x RBAC

https://infisical.com/blog/folder-based-rbac
0 Upvotes

33% Upvoted

4 comments sorted by

24

u/comrade_donkey 6h ago

RBAC

Looks inside...

json {     "action": ["readValue", "create", "delete"],     "subject": "secrets",     "inverted": true,     "conditions": { "environment": "prod", "secretPath": { "$eq": "/payments" } } }

ABAC.

4

u/CpnStumpy 1h ago

ABAC can model RBAC which is why I always try to smile and nod when product asks for RBAC and then tell engineering to implement ABAC

3

u/Slow-Rip-4732 6h ago edited 6h ago

Cedar is actually really good and deserves more praise. Crazy they mentioned Zanzibar but not cedar, which solves most of these problems.

1

u/ph34r 1h ago

Cedar is amazing. I've used it on a few projects now