access-controls
هذا المحتوى غير متوفر بلغتك بعد.
Access Controls Plugin
Section titled “Access Controls Plugin”RBAC + ABAC with policy engine and permission cache. Pro plugin.
Requires: Basic license tier or higher.
nself license set nself_pro_...
Install
Section titled “Install”nself license set nself_pro_xxxxx...nself plugin install access-controlsWhat It Does
Section titled “What It Does”Extends ɳSelf Auth with fine-grained access control. Implements both Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC). Define roles, permissions, and policy rules that evaluate user attributes, resource properties, and context. Results are cached in Redis for fast permission checks on every request. Integrates with Hasura’s permission system.
Configuration
Section titled “Configuration”| Env Var | Default | Description |
|---|---|---|
ACCESS_CONTROLS_PORT | 3027 | Access controls service port |
ACCESS_CONTROLS_CACHE_TTL | 300 | Permission cache TTL in seconds |
ACCESS_CONTROLS_DEFAULT_DENY | true | Deny access if no policy matches |
ACCESS_CONTROLS_AUDIT_ENABLED | true | Log all permission decisions |
| Port | Purpose |
|---|---|
| 3027 | Access controls REST API |
Database Tables
Section titled “Database Tables”6 tables added to your Postgres database:
np_access_controls_roles: role definitionsnp_access_controls_permissions: permission definitionsnp_access_controls_role_permissions: role-permission mappingsnp_access_controls_policies: ABAC policy rulesnp_access_controls_assignments: user-role assignmentsnp_access_controls_audit: permission decision log
Nginx Routes
Section titled “Nginx Routes”| Route | Target |
|---|---|
/access-controls/ | Access controls management API |
/access-controls/check | Permission check endpoint |