[afiori]

I only did a quick read of permit.io offering but iirc they don't focus on hierarchical data. If having access to a resource cannot grant access to unbounded number of other independent resources (eg sharing a folder) then almost all issues of the article disappear

[bitweis]

too quick man, it's a key feature:

https://www.permit.io/rebac