Casbin-Ruby: an authorization library supporting distributed role-based access control (RBAC)
The Californer/10213548

SAN FRANCISCO - Californer -- Our KFC project employs a microservice architecture, with components written in various languages and runtime environments, such as .NET, Ruby, and Go. Many of these components need to be able to make decisions based upon the authorization status of a user: who are they, what roles do they belong to, what actions are they able to perform, and to what?

We needed a consistent way to use role-based access control between multiple independent languages, and we also needed a way to manage the permissions and access control lists (ACLs). We discovered Casbin, an authorization library that was implemented in a variety of different languages. But there was one snag: we needed a Ruby implementation, and Casbin had not yet been ported to Ruby. So, we decided to do it ourselves, and the result is Casbin-Ruby. Read more about the Casbin-Ruby open-source project.

More on The Californer

• A Century of Compassion: Butte Humane Society Hosts 114th Anniversary Gilded Garden Gala
• United Set to Hire More Special Olympics Athletes As Customer Service Ambassadors
• Exelon Leader Tamla Olivier Named 2025 Technologist of the Year by Waves of Change STEM Conference
• KIDZ BOP RELEASES BRAND NEW ALBUM 'KIDZ BOP 51' FEATURING HITS "APT" & "PINK PONY CLUB"
• Be Part of the World's Largest Art Biennale | Moons, Castles, Trees | Copenhagen Chronotopes

How does it work?

At its simplest, each microservice has access to two files, which are distributed across the system. The first contains a list of the users, groups, roles, and so on — in other words, it defines the authorization principles. The second contains the mappings between the principals: in effect, it is an amalgamation of all of the access control lists used by the system.

This provides the solution for the very core of our challenge: decentralization (or distributed) management of users, roles, and what they can do.

https://evrone.com/kfc
https://evrone.com/casbin-ruby