[{"data":1,"prerenderedAt":239},["ShallowReactive",2],{"project-38164327":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":36,"aspects":37,"strip":42,"post_text":44,"what":45,"said":93,"maker_in_thread":163,"shape":168,"grid":171,"attempts":202,"same_week":203,"maker_shows":40,"maker_hidden":231,"reader_version":232,"card":233},"38164327","Topaz 0.30","OSS authz service combining the best of OPA and Zanzibar","title","Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar","https:\u002F\u002Fwww.aserto.com\u002Fblog\u002Fannouncing-topaz-030","aserto.com","ogazitt",1699286520,2023,35,16,1290,3109,42,"shown","infrastructure","authorization service","api",[24,25,26,27,28],"authorization","rebac","open policy agent","rego","zanzibar","loved",0.528,{"positive":32,"neutral":33,"mixed":34,"critical":35},6,3,1,0,10,{"docs":38,"idea":39,"execution":41},{"positive":34,"critical":35},{"positive":40,"critical":35},4,{"positive":35,"critical":35},[43,35,33,35,33,43,33,33,43,35,43,35,43,35,43,35],5,"Hey folks! As Topaz turns a year old, we just released a big update, including support for a new authorization schema language, a built-in visual console, REST APIs for the ReBAC directory, a full test harness, and many other improvements.\n\nWould love to get your feedback! Check out the blog post [0] for the complete details (including some cool screenshots), or clone \u002F fork the repo here [1]. Many thanks!\n\n[0] https:\u002F\u002Fwww.aserto.com\u002Fblog\u002Fannouncing-topaz-030\n\n[1] https:\u002F\u002Fgithub.com\u002Faserto-dev\u002Ftopaz",{"problem":46,"audience":58,"pricing":64,"motivation":65,"time_to_build":64,"stack":74,"openness":90,"stage":91,"team_size":92},{"value":47,"source":48,"evidence":49},"Building and managing authorization logic and relationship data by hand","commenter",[50,54],{"id":51,"by":52,"text":53},"38166130","janczukt","It is great to see this release coming together. I am working on a new app right now. While authentication is a solved problem with services like Auth0, how to set up a robust…",{"id":55,"by":56,"text":57},"38166442","gblock72","Congrats! Great to see the evolution and love how it scales. If I never have to implement authZ again, that will be a happy day :-)",{"value":59,"source":60,"evidence":61},"Developers building apps that need authorization","inferred",[62,63],{"id":51,"by":52,"text":53},{"id":55,"by":56,"text":57},null,{"value":66,"source":67,"evidence":68},"Combine OPA and Zanzibar-style ReBAC into one authorization service","maker",[69,71],{"id":70},"post",{"id":72,"by":11,"text":73},"38164597","Thanks for the question! Those are both great projects. Topaz combines the best elements of both: * It uses OPA as its decision engine and Rego as the policy language, and…",[75,79,83],{"value":76,"source":67,"evidence":77},"Open Policy Agent (OPA)",[78],{"id":72,"by":11,"text":73},{"value":80,"source":67,"evidence":81},"Rego",[82],{"id":72,"by":11,"text":73},{"value":84,"source":60,"evidence":85},"Go",[86],{"id":87,"by":88,"text":89},"38164626","milo_a_hoffman","Today we are using OpenFGA and OPA together, as OPA does not provide a real solution managing our data and we only have a few real attribute based checks we need to make. OpenFGA…","open_source","launched","unknown",{"praise":94,"objections":122,"requests":132,"questions":141,"alternatives":152},[95,105,115],{"value":96,"source":48,"evidence":97},"Built-in test harness (topaz test) is useful",[98,102],{"id":99,"by":100,"text":101},"38164846","bradhe","Been fun to watch this project progress. I have tried it out in a few apps before. Love the test harness, that's super useful!",{"id":103,"by":11,"text":104},"38165046","Thanks! \"topaz test\" is already pretty useful, and we hope to bring assertions into the visual console in a future release.",{"value":106,"source":48,"evidence":107},"Combining ReBAC and ABAC in one tool",[108,112],{"id":109,"by":110,"text":111},"38164686","gertd","I love the fact it is bring relational and attribute based together, happy birthday Topaz !",{"id":113,"by":110,"text":114},"38164790","In simple terms topaz brings a rebac data solution together with OPA, so you only have to create attribute based authorization rules when really needed, to compliment the…",{"value":116,"source":48,"evidence":117},"Fills the authorization gap the way Auth0 fills authentication",[118,119],{"id":51,"by":52,"text":53},{"id":120,"by":11,"text":121},"38166375","Thanks! That's exactly the analogy we think of... Auth0 : AuthN :: Topaz : AuthZ :)",[123],{"value":124,"source":48,"evidence":125},"Runs as a container; no native Windows Service yet",[126,129],{"id":127,"by":88,"text":128},"38164837","I see it is a container based solution, is that a requirement, we (have to) run on Windows Server, can I run topaz without a container, just bare metal?",{"id":130,"by":110,"text":131},"38164997","You can, simply use the topazd.exe binary from the topaz_windows_x86_64.zip from the GH releases page (https:\u002F\u002Fgithub.com\u002Faserto-dev\u002Ftopaz\u002Freleases). Note this is currently not a…",[133,137],{"value":134,"source":48,"evidence":135},"Native Windows Service support",[136],{"id":130,"by":110,"text":131},{"value":138,"source":67,"evidence":139},"Assertions in the visual console",[140],{"id":103,"by":11,"text":104},[142,148],{"value":143,"source":48,"evidence":144},"How does it compare to OpenFGA and OPA",[145],{"id":146,"by":88,"text":147},"38164541","How does this compare to other CNCF solutions like OpenFGA and OPA?",{"value":149,"source":48,"evidence":150},"Can it run without a container on bare metal",[151],{"id":127,"by":88,"text":128},[153,158],{"value":154,"source":48,"evidence":155},"OpenFGA",[156,157],{"id":146,"by":88,"text":147},{"id":87,"by":88,"text":89},{"value":159,"source":48,"evidence":160},"OPA",[161,162],{"id":146,"by":88,"text":147},{"id":87,"by":88,"text":89},{"comments":32,"answered":34,"key":164},[165,166,167],{"id":103,"text":104},{"id":72,"text":73},{"id":120,"text":121},{"commenters":169,"max_depth":43,"maker_replies":32,"first_comment_mins":170,"lifespan_hours":33},7,15,[172,174,176,177,179,181,182,184,185,187,189,190,192,193,195,199],[99,35,43,173,100,35],"project\u002Fpositive\u002Fdocs",[103,35,35,175,11,34],"project\u002Fneutral\u002Fnone",[146,34,33,175,88,35],[72,34,35,178,11,34],"project\u002Fpositive\u002Fidea",[87,34,33,180,88,35],"project\u002Fmixed\u002Fidea",[113,34,43,178,110,35],[127,34,33,183,88,35],"project\u002Fneutral\u002Fexecution",[130,34,33,183,110,35],[51,186,43,178,52,35],2,[120,186,35,188,11,34],"maker\u002Fpositive\u002Fnone",[55,33,43,178,56,35],[191,33,35,178,11,34],"38166996",[109,40,43,178,110,35],[194,40,35,178,11,34],"38165059",[196,43,43,197,198,35],"38164537","project\u002Fpositive\u002Fnone","apoland",[200,43,35,201,11,34],"38165085","maker\u002Fneutral\u002Fnone",[],[204,209,213,217,221,226],{"id":205,"name":206,"points":207,"category":208},"38167363","Inshellisense",388,"dev_tools",{"id":210,"name":211,"points":212,"category":208},"38161452","Ladder",377,{"id":214,"name":215,"points":216,"category":20},"38155544","WireHub",312,{"id":218,"name":219,"points":220,"category":208},"38152109","Sshx",242,{"id":222,"name":223,"points":224,"category":225},"38194586","Bulletpapers",178,"ai",{"id":227,"name":228,"points":229,"category":230},"38108044","DoltgreSQL",162,"data",false,"v2",{"id":234,"name":5,"line":6,"ai":231,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":235,"top":18,"kw":236,"maker":11,"domain":10,"tier":19,"attempts":35,"strip":237,"url":9,"mix":238,"praise":96,"objection":124,"sub":21},38164327,0.53,[24,25,26,27,28],"5030353350505050",[32,33,34,35],1794036644353]