Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Any update when the OPA friendly Keto might drop? If someone wanted to build an ABAC prototype today is there any path you might recommend?

unfortunately that is still a very early draft idea
you probably read the issues, what is your thought? maybe you have some ideas?

in my opinion it makes most sense to have keto as a very low-level authorization system, and build something more sophisticated on top of it

specifically I am referring to this issue: <https://github.com/ory/keto/issues/319>

so basically the idea of
&gt;  the client can add relation tuples dynamically only for single requests