dotkernel / api

DotKernel's PSR-7 REST style API built around the Mezzio API skeleton.
https://docs.dotkernel.org/api-documentation/
MIT License
26 stars 4 forks source link

dotKernel & Casbin #221

Open tasselchof opened 4 months ago

tasselchof commented 4 months ago

I'd like to introduce another topic for discussion. While we successfully addressed a previous issue through middleware integration, I wanted to share an idea. Role-Based Access Control (RBAC) may not always be the most suitable approach.

In our case, we required a more flexible permissions system, leading us to opt for Casbin for management. Casbin supports various permission models, and you can find more information at php-casbin/php-casbin. Perhaps exploring alternatives to RBAC could prove beneficial.

Additionally, using Casbin offers another advantage – the relatively easy synchronization of permissions between the frontend application (as mentioned in my previous issue, developed with vue.js) and the backend.