2 releases
0.1.1 | Dec 14, 2023 |
---|---|
0.1.0 | Dec 8, 2023 |
#1109 in Database interfaces
25KB
567 lines
This library implements a in-memory relationship-based access control dababase, that was inspired by Google's Zanzibar.
Naming
Object
A Object
is a tuple of the values (namespace
, id
).
It represents a object like a user.
Example: (users
, alice
).
Set
A Set
is a tuple of the values (namespace
, id
, permission
).
It represents a permission for a Object
.
Example: (files
, foo.pdf
, read
).
Usage
The RelationGraph
-struct contains a graph of all relationships.
Relationships can be created between:
Object
andSet
=> user alice can read the file foo.pdf.Set
andSet
=> everyone who can read the file foo.pdf can read the file bar.pdf.
Specials
- The
*
-id is used as a wildcard id to create a virtual relation from this id to every other id in the namespace. Example: (user
,alice
) -> (file
,*
,read
) => user alice can read every file
Roadmap
- implement raft protocol to allow ha deployment
Server
A basic gRPC based server for interacting with the database can be found in the git repository.
Contributing
I'm happy about any contribution in any form. Feel free to submit feature requests and bug reports using a GitHub Issue. PR's are also appreciated.
License
This Library is licensed under LGPLv3.
Dependencies
~2.1–7.5MB
~49K SLoC