Hello, a while back I POC'd a solution with Cerbos...
# help
b
Hello, a while back I POC'd a solution with Cerbos to support users being able to customize their own role definitions including attribute-based conditions (using the Admin API). However, at the time, Cerbos supported a SQL Server driver, which simplified additional infra for our DevOps team. Now we're considering our options (particularly in the short to mid term) aside from setting up a separate Postgres or MySQL instance. I haven't seen if there are other ways to plug-in a custom driver or if there are plans to support that ability. If there was an option in this vein, then we could consider planning to use SQL Server longer term anyway although it would still be fairly likely to be too much of a maintenance burden for our team. We have a solution with static role definitions/policies that works using a File Share on Azure Storage (disk driver). Especially at our scale it might be enough to just upload policies and reload the Cerbos instance(s), accepting some propagation delay and limited management functionality. Schemas and policies related to default role definitions will update behind a deployment anyway and we don't expect updates to happen at a huge scale likely for some time. Are there other options to consider? How viable is evolving on a file-based solution? Or are there gotchas that might warrant prioritizing moving to a DB driver sooner? Further, I understand the Admin API could introduce breaking changes in future updates. I don't see it as a major deterrent from moving off a file-based solution when running our own instance, but not sure how often we should expect to make code changes alongside a version update. Sorry for the lengthy post, but any feedback would be much appreciated.
e
Hi Byron, thanks for your message. YES, we have another solution that we will shortly be releasing that straddles the best of these two worlds. We have been working on how best to optimize the software engineering defined hard coded roles and rules with user defined dynamic modifications. Would you be open to having a call this week to further discuss your requirements and give feedback on our feature that is rolling out soon? Do any of these times work for you? https://meetings.hubspot.com/alex-olivier/cerbos-1hr-workshop cc:@Alex Olivier (Cerbos)
b
Sure I booked a call at 7am CST. May have another guy or two join from my side