Apache Fortress - Identity and Access Management

•    Java

---

Apache Fortress the open source identity and access management built on OpenLDAP. Fortress is designed to address complex authentication, authorization and auditing needs simply and easily. It helps to ensure strict adherence to current security standards while allowing for ease of installation and ongoing maintenance. A standards-based access management system, written in Java, that provides role-based access control, delegated administration and password policy services with LDAP.

openiam identity-management access-management ldap identity-access-management rbac role-based-access-control access-control

athenz - Athenz is a role-based authorization (RBAC) system for provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases

•    Java

---

AthenZ is a set of services and libraries supporting role-based authorization for provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

rbac role-based-access-control authorization containers featured

mithril.api - Authentication and role management service.

•    Elixir

---

Mithril – authentication and role management service. Mithril is a precious Silvery metal, very lightweight but capable of providing extreme strength in alloys.

elixir elixir-lang oauth2 phoenix tokens access-control role-based-access-control

ASP

•    CSharp

---

Code sample detailing how to create custom roles in ASP.NET core on startup and role-based authentication using role checks and policy based checks. the dotnet run command simultaneously re-compiles and runs the kestrel-server.

asp-net-core aspnetcore asp-net asp-net-core-mvc role-based-access-control role-manager authorization

tensor - Tensor - Comprehensive web-based automation framework and Centralized infrastructure management platform

•    Go

---

Centralized infrastructure management platform, provides role-based access control, job scheduling, inventory management. The REST API supports ansible & terraform. Brought to you courtesy of our legal counsel. For more context, please see the NOTICE document in this repo.

ansible terraform frontend automation ci-cd role-based-access-control

deflek - index and API RBAC for Elasticsearch and Kibana via reverse proxy

•    Go

---

Reverse proxy that adds index-level RBAC to Elasticsearch. It currently requires fronting with a SSO authentication proxy (such as saml-proxy) to pass Username and Group headers for RBAC lookup. deflEK assumes these headers are trusted input. If that is not true for your use case, you MUST add your own authentication middleware, or else it will not work.

rbac elasticsearch kibana reverse-proxy security authorization elk authentication audit-log role-based-access-control

role_core - A Rails engine providing essential industry of Role-based access control

•    Ruby

---

RoleCore is a Rails engine which could provide essential industry of Role-based access control. The dummy app shows a simple multiple roles with CanCanCan integration including a management UI.

rails-engine role cancancan rbac role-based-access-control pundit access-control rolify rails

casbin-cpp - An authorization library that supports access control models like ACL, RBAC, ABAC in C/C++

•    C++

---

In Casbin, an access control model is abstracted into a CONF file based on the PERM metamodel (Policy, Effect, Request, Matchers). So switching or upgrading the authorization mechanism for a project is just as simple as modifying a configuration. You can customize your own access control model by combining the available models. For example, you can get RBAC roles and ABAC attributes together inside one model and share one set of policy rules.

casbin cpp access-control authorization rbac abac permission access-control-list role-based-access-control attribute-based-access-control acl

fxp-security - A Extended Role-Based Access Control with sharing rules

•    PHP

---

The Fxp Security Component is a Extended Role-Based Access Control (E-RBAC) including the management of roles, role hierarchy, groups, and permissions with a granularity ranging from global permission to permission for each field of each object. With the sharing rules, it's possible to define users, groups, roles or permissions for each record of an object. In this way, a user can get more permissions due to the context defined by the sharing rule. All the installation instructions are located in documentation.

symfony rbac role-based-access-control permission sharing rules security doctrine hierarchy

fxp-security-bundle - A Extended Role-Based Access Control with sharing rules

•    PHP

---

The Fxp SecurityBundle is a Extended Role-Based Access Control (E-RBAC) including the management of roles, role hierarchy, groups, and permissions with a granularity ranging from global permission to permission for each field of each object. With the sharing rules, it's possible to define users, groups, roles or permissions for each record of an object. In this way, a user can get more permissions due to the context defined by the sharing rule. All the installation instructions are located in documentation.

doctrine hierarchy permission rbac role-based-access-control rules security sharing symfony symfony-bundle

vue-simple-acl - A simple unopinionated Vue plugin for managing user roles and permissions, access-control list (ACL) and role-based access control (RBAC)

•    TypeScript

---

A simple unopinionated Vue plugin for managing user roles and permissions, access-control list (ACL) and role-based access control (RBAC). For readability, it is recommend to defined your ACL rules in a separate file.

vuex acl vue2 vue-router acl-rules vue-auth vue3 acl-options vue vuejs vue-2 vue-3 rbac vue-alc vue-simple-alc access-control-list role-based-access-control javacript typescript