Hacker News new | ask | show | jobs
by jzelinskie 1904 days ago
I don't work at ORY, but I do work on a Zanzibar implementation.

Basically, what you're describing is called "GBAC". GBAC can be great if you need the full power of a typical Graph API, but Zanzibar-like services are focused on solving the problem of finding a path between two edges[1] and doing everything you can to optimize that operation for latency. GBAC is flexible, but at the cost of performance compared to something more structured.

[0]: https://docs.authzed.com/authz/what-else#gbac-graph-based-ac...

[1]: https://authzed.com/blog/identity-isnt-the-foundation/

1 comments

Who else does GBAC? How widely used is it?