casbin - An authorization library that supports access control models like ACL, RBAC, ABAC in Golang

•    Go

---

Casbin is a powerful and efficient open-source access control library for Golang projects. It provides support for enforcing authorization based on various access control models. In Casbin, an access control model is abstracted into a CONF file based on the PERM metamodel (Policy, Effect, Request, Matchers). So switching or upgrading the authorization mechanism for a project is just as simple as modifying a configuration. You can customize your own access control model by combining the available models. For example, you can get RBAC roles and ABAC attributes together inside one model and share one set of policy rules.

casbin etcd access-control authorization rbac abac acl auth authz permission

xorm-adapter - Xorm adapter for Casbin

•    Go

---

Xorm Adapter is the Xorm adapter for Casbin. With this library, Casbin can load policy from Xorm supported database or save policy to it. This project is under Apache 2.0 License. See the LICENSE file for the full license text.

casbin adapter storage-driver xorm orm access-control authorization

authz - gin-authz is an authorization middleware for Gin

•    Go

---

Authz is an authorization middleware for Gin, it's based on https://github.com/casbin/casbin. For how to write authorization policy and other details, please refer to the Casbin's documentation.

casbin gin gin-gonic

go-simple-api-gateway - [dev] simple api gateway written by golang

•    Go

---

A simple API gateway written by golang. Support for authenticate and authorization, and web applications will be protected after the gateway.

casbin gateway

ladon - A SDK for access control policies: authorization for the microservice and IoT age

•    Go

---

Ladon is the serpent dragon protecting your resources.Ladon is a library written in Go for access control policies, similar to Role Based Access Control or Access Control Lists. In contrast to ACL and RBAC you get fine-grained access control with the ability to answer questions in complex environments such as multi-tenant or distributed applications and large organizations. Ladon is inspired by AWS IAM Policies.

angular-permission - Simple route authorization via roles/permissions

•    Javascript

---

Fully featured role and permission based access control for your angular applications

angular ui-router ng-route angular-route access-control permissions access acl rbac roles route angular2 angular-component

rbac - PHP-RBAC is an authorization library for PHP

•    PHP

---

PHP-RBAC is an authorization library for PHP. It provides developers with NIST Level 2 Hierarchical Role Based Access Control and more, in the fastest implementation yet. Take a look at the "Before You Begin" section of our Documentation to learn what an RBAC system is and what PHP-RBAC has to offer you and your project.

defender - Roles & Permissions for Laravel 5

•    PHP

---

Defender is an Access Control List (ACL) Solution for Laravel 5.* (single auth). (Not compatible with multi-auth) With security and usability in mind, this project aims to provide you a safe way to control your application access without losing the fun of coding. Defender is looking for maintainers and contributors.

defender middleware laravel acl acl-library rbac

Apache Fortress - Identity and Access Management

•    Java

---

Apache Fortress the open source identity and access management built on OpenLDAP. Fortress is designed to address complex authentication, authorization and auditing needs simply and easily. It helps to ensure strict adherence to current security standards while allowing for ease of installation and ongoing maintenance. A standards-based access management system, written in Java, that provides role-based access control, delegated administration and password policy services with LDAP.

openiam identity-management access-management ldap identity-access-management rbac role-based-access-control access-control

ngx-permissions - Permission and roles based access control for your angular(angular 2,4,5,6,7+) applications(AOT, lazy modules compatible

•    TypeScript

---

To see better structured documentation go to wiki-page. In one month the detailed functionality description will be available only on wiki page. If you use a SharedModule that you import in multiple other feature modules, you can export the NgxPermissionsModule to make sure you don't have to import it in every module.

angular2 ngx-permissions angular2-permissions ng2-permissions angular ngx-permission ng-permission permissions angular4 angular5 angular2-permission roles angular-permissions acl rbac access access-control angular-2 angular-4 angular-5 angular-6 angular6 angularx angular-x ng ngx ng2 ng4 ng5 permission role guard router ngx-router angular2-router angular4-router

docker_auth - Authentication server for Docker Registry 2

•    Go

---

The original Docker Registry server (v1) did not provide any support for authentication or authorization. Access control had to be performed externally, typically by deploying Nginx in the reverse proxy mode with Basic or other type of authentication. While performing simple user authentication is pretty straightforward, performing more fine-grained access control was cumbersome. Docker Registry 2.0 introduced a new, token-based authentication and authorization protocol, but the server to generate them was not released. Thus, most guides found on the internet still describe a set up with a reverse proxy performing access control.

laravel-heyman - Laravel authorization and validation made nice and easy.

•    PHP

---

In fact, We have tackled a lot of complexity behind the scenes, to provide you with a lot of simplicity. This is fork from result of laracasts.com tutorial series refactored to use the Heyman package.

laravel laravel-package laravel-acl laravel-authorization laravel-roles laravel-roles-permissions access-control-list authorization laravel-gate laravel-validation laravel-eloquent-validation eloquent-validation tell-dont-ask

MACA

•    Java

---

The MACA objective is to provide user authentication, session management and authorization services independently of platform. Authorization servive is based on a contextual role-based access control model that extends NIST RBAC

gatekeeper - Gatekeeper: An Authentication & Authorization Library

•    PHP

---

The Gatekeeper library is a simple drop-in library that can be used to manage users, permissions and groups for your application. The goal is to make securing your application as simple as possible while still providing a solid and secure foundation to base your user system around. Gatekeeper is best classified as a Role-Base Access Control (RBAC) system with users, groups and permissions. It is framework-agnostic and is set up to use its own database for the user handling.

authentication authorization

laratrust - Handle roles and permissions in your Laravel application

•    PHP

---

Laratrust is an easy and flexible way to add roles, permissions and teams authorization to Laravel 5 (>=5.2.32). For Laravel < 5.2.32 please use the 4.0 branch.

laratrust laravel roles authorization permissions acl rbac secure multiuser teams

declarative_authorization - An unmaintained authorization plugin for Rails

•    Ruby

---

The declarative authorization plugin offers an authorization mechanism inspired by RBAC. The most notable distinction to other authorization plugins is the declarative approach. That is, authorization rules are not defined programmatically in between business logic but in an authorization configuration. With programmatic authorization rules, the developer needs to specify which roles are allowed to access a specific controller action or a part of a view, which is not DRY. With a growing application code base roles' permissions often change and new roles are introduced. Then, at several places of the source code the changes have to be implemented, possibly leading to omissions and thus hard to find errors. In these cases, a declarative approach as offered by decl_auth increases the development and maintenance efficiency.

Role Manager

•    Java

---

Role Manager is a security management framework based on the NIST model for Role Based Access Control (RBAC) and the Java[TM] 2 Platform security standards. The access control policies and the RBAC Model are implemented using the RBAC profile of XACML.

zfc-rbac - Role-based access control module to provide additional features on top of Zend\Permissions\Rbac

•    PHP

---

ZfcRbac is an access control module for Zend Framework 2, based on the RBAC permission model. If you are looking for older version of ZfcRbac, please refer to the 0.2.x branch. If you are using ZfcRbac 1.0, please upgrade to 2.0.

Rasea

•    Java

---

An acronym for cRoss-plAtform accesS control for Enterprise Applications. Rasea aims to become a reference in access control as a service based on the RBAC model.

Apache Karaf - OSGi distribution for server-side applications

•    Java

---

Karaf Container is a modern and polymorphic container. It's a lightweight, powerful, and enterprise ready container powered by OSGi. By polymorphic, it means that Karaf can host any kind of applications: OSGi, Spring, WAR, and much more. It uses either the Apache Felix or Eclipse Equinox OSGi frameworks, providing additional features on top of the framework.

application container osgi component modular