Skip to content

1.8.0 — ReBAC (Local graph + OpenFGA/SpiceDB)

Choose a tag to compare

View all tags
@Cheater121 Cheater121 released this 23 Oct 21:25
· 51 commits to main since this release
v1.8.0
6582af5

Adds first-class relationship-based authorization:

  • rel policy condition + pluggable RelationshipChecker
  • Built-in local graph store and standard_userset(...) helper
  • Optional providers: OpenFGA / SpiceDB, sync & async, batch_check(...)
  • Fail-closed if no checker is configured; docs & examples included
  • No breaking changes

Upgrade

pip install -U rbacx
# optional extras:
pip install -U "rbacx[rebac-openfga]" "rbacx[rebac-spicedb]"

Enable (local)

from rbacx import Guard
from rbacx.rebac.local import InMemoryRelationshipStore, LocalRelationshipChecker, This
checker = LocalRelationshipChecker(InMemoryRelationshipStore(), rules={"document":{"viewer":[This()]}})
guard = Guard(policy, relationship_checker=checker)
Assets 2
Loading