"RBAC Like It Was Meant To Be", Avery Pennarun, TailScale (https://tailscale.com/blog/rbac-like-it-was-meant-to-be/).

On HN: https://news.ycombinator.com/item?id=28342504

PS: I used to be interested in this stuff at one point (http://rmathew.com/2006/security-3-as-and-3-rs.html).

#Security #ACL #AccessControl #RoleBasedAccessControl #RBAC #Authorization