article thumbnail

ABAC on SpiceDB: Enabling Netflix’s Complex Identity Types

The Netflix TechBlog

Given the near-perfect requirement match, it does make you wonder what Google’s Zanzibar has been up to since the white paper! CEL expressions are type-safe, so they wouldn’t cause as many errors at runtime and can be stored in the datastore as a compiled protobuf.

Cache 249