joebalancio / authzy Goto Github PK

Should the register prefix be dropped?

// Register voter
authorizer.voter('is-registered', isRegisteredVoter)

// Retrieve voter
authorizer.voter('is-registered')

// Register poll
authorizer.poll('user', 'view', 'movie', ['is-registered'])

Should constants by flattened on authzy itself?

authzy.constants.ALLOW
authzy.ALLOW

I found a previous bug related to a bad unanimous strategy implementation. I need to create tests to validate the current strategies against existing implementations.

Implementations:

• Symfony
• Spring Security

There would be a need to use simple voters for create polls, such as a voter that always allow, denies, or abstains.

authorizer.registerPoll('user', 'view', 'movie', [authzy.voters.allow])
authorizer.registerPoll('user', 'update', 'movie', [authzy.voters.deny])
authorizer.registerPoll('user', 'delete', 'movie', [authzy.voters.abstain])

It would be nice to be able to make a decision based on an instance of a subject or resource.

class User {}
class Movie {}
authorizer.registerPoll(User, 'view', Movie, ['access'])
authorizer.decide(new User(), 'view', new Movie())

A poll would be matched if the action is an instance of User and the resource is an instance of Movie.

People need this!