Open-source alternatives to Rabarber

Middleware based authorization for Absinthe GraphQL powered by Bodyguard

:hatching_chick: Elixir authorization and resource-loading library for Plug applications.

Awesome Django authorization, without the database

django-guardian is a Django object permission library that enables the assignment of fine-grained access rights to individual database records. This system provides object-level access control, allowing users or groups to be granted permissions for specific model instances rather than applying a single global rule to an entire data model. The library includes a permission manager for the Django administrative interface, which provides a visual dashboard to assign and audit these instance-specific security rules. It also features an anonymous access controller to define and verify permissions

Pundit is a Ruby authorization framework that implements policy-based access control. It maps domain models to dedicated logic classes that determine whether a user is permitted to perform specific actions on data objects. The framework utilizes plain Ruby objects to decouple authorization logic from the model. It includes mechanisms for data query scoping to filter record collections based on user permissions, as well as attribute-level permission control to restrict which specific model fields a user can modify. The system provides tools for authorization coverage verification to ensure se

Easy to use and read action and content based authorizations.

OAuth2 goodies for the Djangonauts!

Easy permission definitions in Elixir apps!

Rule based authorization for Elixir

django-permission .. image:: https://img.shields.io/travis/lambdalisue/django-permission/master.svg?style=flat-square :target: http://travis-ci.org/lambdalisue/django-permission :alt: Build status .. image::…

Scope-based authorization for Ruby on Rails.

🛡 Modern elixir ACL/ABAC library for managing granular user abilities and permissions

Getting Started

Role management library with resource scoping

Simple authorization conventions for Phoenix apps