Aserto playground
Security and privacy
authorization policy
SHOW HN2022
21points
12comments
#1,460of 2,570 in 2022
Top 57%of 2022 by points
How HN took it
CuriousMostly questions and neutral comments
1 positive, 5 neutral or asking, 0 mixed, 0 critical, out of 6 comments about the project. Thread score +0.05.
Idea: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Seen as a useful tool for generating and testing Rego policies from OpenAPI
From 1 comment
So this is basically a tool for generating and testing Rego policies from an OpenAPI spec. Very cool!
itsronenh on HN
Thread discussion quality praised
From 1 comment
Thanks for the link to that post - unusually good discussion on that page (even for HN)
yodon on HN
Requests
Support for Dapr sidecars
From 1 comment
Does your k8s sidecar approach work with https://dapr.io sidecars?
yodon on HN
Questions
Whether package names must match API routes and whether one policy can cover multiple endpoints
From 2 comments
Do package names have to match API routes? Can I create a policy that is shared by multiple endpoints?
itsronenh on HNBy convention, we generate a package for every API definition in the OpenAPI spec. But the calling application can decide which package to use when authorizing an operation, so…
ogazitt on HN
What can be done with policies created in the playground
From 1 comment
What can I do with policies I create in this playground?
rschwabco on HN
Alternatives named
Open Policy Agent (OPA)
From 1 comment
Authorization is a must-have for every application, but most teams have to build it from scratch. The Open Policy Agent [0] is a good place to start for creating an OSS-based…
ogazitt on HN