[{"data":1,"prerenderedAt":302},["ShallowReactive",2],{"project-33317597":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":36,"aspects":37,"strip":43,"post_text":45,"what":46,"said":84,"maker_in_thread":172,"shape":182,"grid":186,"attempts":266,"same_week":267,"maker_shows":35,"maker_hidden":295,"reader_version":296,"card":297},"33317597","Topaz","open-source authorization combining the best of OPA and Zanzibar","title","Show HN: Topaz: open-source authorization combining the best of OPA and Zanzibar","https:\u002F\u002Fgithub.com\u002Faserto-dev\u002Ftopaz","github.com","ogazitt",1666623704,2022,132,32,459,2570,18,"notable","infrastructure","authorization service","cli",[24,25,26,27,28],"authorization","zanzibar","open policy agent","rebac","access control","debated",0.08,{"positive":32,"neutral":33,"mixed":34,"critical":35},5,2,1,4,12,{"docs":38,"design":40,"idea":41,"performance":42},{"positive":39,"critical":34},0,{"positive":39,"critical":39},{"positive":35,"critical":39},{"positive":39,"critical":33},[44,44,39,39,44,39,39,39,39,39,39,32,39,39,39,32,34,39,32,39,32,39,34,39,39,34,39,39,39,34,32,39],3,null,{"problem":47,"audience":54,"pricing":45,"motivation":58,"time_to_build":45,"stack":62,"openness":81,"stage":82,"team_size":83},{"value":48,"source":49,"evidence":50},"Building robust fine-grained authorization in-house is hard and time-consuming","maker",[51],{"id":52,"by":11,"text":53},"33317601","Two years ago, we founded Aserto to simplify authorization for developers. Authorization is critical and hard to get right, yet isn't a source of differentiation for most…",{"value":55,"source":49,"evidence":56},"Developers building cloud applications who need authorization",[57],{"id":52,"by":11,"text":53},{"value":59,"source":49,"evidence":60},"Authorization is critical and hard, and isn't a differentiator for most applications",[61],{"id":52,"by":11,"text":53},[63,71,75],{"value":64,"source":65,"evidence":66},"Go","commenter",[67],{"id":68,"by":69,"text":70},"33321379","jzelinskie","Both OpenFGA and SpiceDB are also implemented in Go, so they could also easily be included as a library. SpiceDB can even be compiled to WASM!",{"value":72,"source":49,"evidence":73},"OPA",[74],{"id":52,"by":11,"text":53},{"value":76,"source":49,"evidence":77},"gRPC",[78],{"id":79,"by":11,"text":80},"33321197","Our design approach with Aserto has been to have a single OPA-based decision engine integrated with a built-in directory. So Topaz carries this forward. We do have a gRPC…","open_source","launched","company",{"praise":85,"objections":100,"requests":118,"questions":131,"alternatives":140},[86,93],{"value":87,"source":65,"evidence":88},"Good to see an open-source authorization building block based on a robust model",[89],{"id":90,"by":91,"text":92},"33341677","janczukt","Great to see an authz app building block based on a robust model as OSS. This is one of those things every app needs but so far most folks were building it in-house (as I can…",{"value":94,"source":65,"evidence":95},"Exciting to see the code released to the community",[96],{"id":97,"by":98,"text":99},"33318041","apoland","Great work Aserto team. Exciting to see this code released to the community.",[101,112],{"value":102,"source":65,"evidence":103},"Adds latency since it runs as a separate service rather than a library",[104,108],{"id":105,"by":106,"text":107},"33321259","renszarv","Yet another golang gRPC authorization framework... That couple of ms response time for a decision could be fine,if you only call a couple of time per request,but its quickly adds…",{"id":109,"by":110,"text":111},"33329206","lakomen","It looks interesting, but I would rather like a package I can import and use locally than running an independent service, because of latency\u002Fperformance.",{"value":113,"source":65,"evidence":114},"Unclear technical details on the website and how it differs from OPA API clients",[115],{"id":116,"by":69,"text":117},"33319515","Congrats on the launch! Combining policy with Zanzibar is super cool and it's great to see the folks in the OPA ecosystem moving in this direction. Most of the novelty of the…",[119,126],{"value":120,"source":65,"evidence":121},"Collaborate with SpiceDB or OpenFGA on the graph layer or directory contract",[122,125],{"id":123,"by":69,"text":124},"33320828","Both REST and built-ins for OPA have been available for existing projects like OpenFGA[0] and SpiceDB[1]. In case of SpiceDB, the first built-in was actually available in June of…",{"id":79,"by":11,"text":80},{"value":127,"source":65,"evidence":128},"Offer an importable library option",[129,130],{"id":109,"by":110,"text":111},{"id":68,"by":69,"text":70},[132,136],{"value":133,"source":65,"evidence":134},"How does it differ from using an OPA API client with SpiceDB and OpenFGA",[135],{"id":116,"by":69,"text":117},{"value":137,"source":65,"evidence":138},"Which Zanzibar properties is it inspired by",[139],{"id":116,"by":69,"text":117},[141,149,154,161,165],{"value":142,"source":65,"evidence":143},"OpenFGA",[144,148],{"id":145,"by":146,"text":147},"33319135","rhamzeh","Love the growing number of OSS Zanzibar implementations, and congrats to the Aserto team for launching Topaz! Ory Keto's intro video @ SV IAM User Group [0] is worth a watch.…",{"id":123,"by":69,"text":124},{"value":150,"source":65,"evidence":151},"SpiceDB",[152,153],{"id":145,"by":146,"text":147},{"id":123,"by":69,"text":124},{"value":155,"source":65,"evidence":156},"Ory Keto",[157],{"id":158,"by":159,"text":160},"33318930","robertlagrant","Ory [0] is also an OSS Zanzibar implementation. [0] https:\u002F\u002Fory.sh",{"value":162,"source":65,"evidence":163},"Permify",[164],{"id":145,"by":146,"text":147},{"value":166,"source":65,"evidence":167},"Oso",[168],{"id":169,"by":170,"text":171},"33322413","gneray","Hey, congrats on the launch! It’s great to see more activity in the authorization domain – a rising tide floats all boats. FWIW I totally see the benefit of having standards and…",{"comments":173,"answered":33,"key":174},9,[175,176,179],{"id":79,"text":80},{"id":177,"text":178},"33323403","I'm Omri, one of the Aserto co-founders. Very much agree that this space is still pretty early - we all started building developer-centric authorization solutions in the last…",{"id":180,"text":181},"33324705","Really great context on what worked and what was perhaps overengineered. The approachability of any system by its consumers (developers in this case) is hugely important. You've…",{"commenters":183,"max_depth":184,"maker_replies":173,"first_comment_mins":39,"lifespan_hours":185},17,8,44,[187,189,193,195,197,198,201,202,204,206,209,211,215,218,220,221,224,228,230,233,235,236,238,242,245,248,250,253,256,259,261,263],[116,39,44,188,69,39],"project\u002Fmixed\u002Fdocs",[190,39,44,191,192,39],"33319971","project\u002Fneutral\u002Fdesign","gertd",[123,39,39,194,69,39],"commenter\u002Fneutral\u002Fidea",[79,39,39,196,11,34],"maker\u002Fneutral\u002Fdesign",[68,39,44,191,69,39],[199,39,39,200,192,39],"33322216","commenter\u002Fneutral\u002Fdesign",[169,39,39,194,170,39],[203,39,39,194,146,39],"33322933",[177,39,39,205,11,34],"maker\u002Fpositive\u002Fidea",[207,39,39,208,170,39],"33324141","commenter\u002Fpositive\u002Fnone",[180,39,39,210,11,34],"maker\u002Fpositive\u002Fdesign",[212,34,32,213,214,39],"33318138","project\u002Fpositive\u002Fidea","bradhe",[216,34,39,217,11,34],"33318259","maker\u002Fneutral\u002Fnone",[158,34,39,219,159,39],"other\u002Fneutral\u002Fnone",[145,34,39,219,146,39],[222,34,32,213,223,39],"33319294","rschwabco",[225,34,34,226,227,39],"33323687","project\u002Fcritical\u002Fdocs","Aeolun",[229,34,39,217,11,34],"33323856",[231,33,32,213,232,39],"33328903","Blokje5",[234,33,39,217,11,34],"33332156",[90,44,32,213,91,39],[237,44,39,217,11,34],"33342163",[239,35,34,240,241,39],"33322137","project\u002Fcritical\u002Fnone","fleddr",[243,35,39,219,244,39],"33326892","bdcravens",[246,35,39,219,247,39],"33328076","machiaweliczny",[105,32,34,249,106,39],"project\u002Fcritical\u002Fperformance",[251,32,39,252,192,39],"33322296","commenter\u002Fneutral\u002Fperformance",[254,32,39,255,110,39],"33329293","commenter\u002Fcritical\u002Fperformance",[52,257,39,258,11,34],6,"project\u002Fneutral\u002Fidea",[109,260,34,249,110,39],7,[97,184,32,262,98,39],"project\u002Fpositive\u002Fnone",[264,184,39,265,11,34],"33319897","maker\u002Fpositive\u002Fnone",[],[268,273,277,282,286,291],{"id":269,"name":270,"points":271,"category":272},"33287137","Restfox",758,"dev_tools",{"id":274,"name":275,"points":276,"category":272},"33344142","SadServers",597,{"id":278,"name":279,"points":280,"category":281},"33336920","steganography",208,"security_privacy",{"id":283,"name":284,"points":285,"category":272},"33306029","Outstatic",203,{"id":287,"name":288,"points":289,"category":290},"33283674","ezpersonality",179,"ai",{"id":292,"name":293,"points":294,"category":272},"33318108","Bolt.css",134,false,"v2",{"id":298,"name":5,"line":6,"ai":295,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":30,"top":18,"kw":299,"maker":11,"domain":10,"tier":19,"attempts":39,"strip":300,"url":9,"mix":301,"praise":87,"objection":102,"sub":21},33317597,[24,25,26,27,28],"33003000000500051050501001000150",[32,33,34,35],1794036626459]