Gatehouse – a composable, async-friendly authorization policy framework in Rust

Viewed 26
Gatehouse is positioned as a lightweight authorization policy framework for Rust applications, offering an ergonomic builder pattern that enhances usability. A notable aspect discussed is the shared signature for permission checks, aligning with other systems like SpiceDB, thereby highlighting universal principles across authorization implementations. However, the conversation also underscores the importance of context data in policy execution, advocating for policy engines to address data sourcing effectively to prevent user experience challenges observed in ecosystems like OPA where many implementations feel like afterthoughts. Further discussions raise concerns about large `lib.rs` files in Rust and the rationale behind async functions in policy checks, suggesting that clear motivations behind these design choices would be beneficial. Overall, while Gatehouse appears promising, practitioners are encouraged to consider the broader implications of data management and async function usage in their implementations.
0 Answers