Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage.

Cerbos Community

is there a way to write time-based cerbos policies? like manager from branch A is only allowed access to branch A data between 9am to 5pm from Mondays to Fridays, or engineer in department C can only access archive data for the next 3 hours?

Yes, there’re <https://docs.cerbos.dev/cerbos/latest/policies/conditions.html#_timestamps|time related functions> available in the policies’ conditions.

so lastaccessed and and lastupdatetime are just custom attributes that we pass in to the /api/check endpoint?

meaning my code has to keep track of these values and pass them in to cerbos for policy evaluation.