Plug-n-play access control! Hi all, I'm sure many of you have had to go through the same headache of designing and implementing 🔒access controls in your apps. I was faced with doing this project for the 4th time in my relatively sort career so decided - rather than repeating myself - to start a company doing just that. Cerbos (https://cerbos.dev) is an open-source, self-hosted authorization system: • Go beyond roles based access controls and use request/resource attributes to decide if a user can do something (eg is the person the owner of the resource) • Decisions are made at request time with a single

/check

endpoint which evaluates all the policies in microseconds and returns the result to your app • Policies are defined in YAML and can follow the gitops workflow that we personally love • Deployment can be done by running a binary, as a k8s sidecar or anything else that can run a container Prisma is my ORM of choice these days (great work 👌) so naturally is one of the first example repos of using Cerbos we have published https://github.com/cerbos/express-prisma-cerbos Any feedback would be greatly appreciated and happy to answer any questions