building ABAC policies via custom UI interface about node-casbin HOT 5 CLOSED

Hi @mjugger , the model can be dynamic too. It can be loaded from code or string instead of .CONF file. See: https://casbin.org/docs/en/model-storage

from node-casbin.

Ah I see. Thanks for the response.
So there is one other thing that this situation brings up and that is: writing policies via a custom UI.

Please bare with me because my understanding of casbin is not great so I'm not sure if I can articulate this well but here I go.

So in my scenario I plan to create an ABAC rule builder that will utilize ABAC subject, object, action, and environment (for now that will be time but can change) and will allow the end user to attach attributes to subject and object with computational and logical operators.
My app will have 1000s (or 100s of 1000s) of users which is why I anticipate there being 1000s of policies.

Because my UI will allow the user to create these policies (in a user friendly no code way) I'm assuming that if I use casbin, my custom UI would need to build models for casbin to used that are attached to the users that created them.

So my question is:

1. can casbin use models created in this way from a database (since they need to be bound to the user that created it) and if it can is it a good idea to do that?

from node-casbin.

So you want to have different models for different users, we have similar feature in the Casbin-Server project, which is in Golang though: https://github.com/casbin/casbin-server

For Casbin UI, we also have some demo-level Admin Portal projects: https://casbin.org/docs/en/admin-portal. But it seems that there's no ABAC attribute level editing UI.

from node-casbin.

@nodece , I think this is what I said about ABAC's GUI on Online editor this Monday.

from node-casbin.

This issue should be resolved at Casbin dashboard side: https://dashboard.casbin.org/

from node-casbin.