Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage.

Cerbos Community

So I've use CASL.js before and they have this thing where you can query if X can do Y to any Z.

Does Cerbos have such a thing?

<https://casl.js.org/v6/en/guide/intro#basics>

Basically instead of calling Cerbos and saying hey, can "Yusuf" really "read" Article "How to cook noodles"

I want to just: can "Yusuf" "read" _any_ "Article"?

The reason I ask is that it allows rejecting the request much much earlier than hitting the DB to fetch the data only to make a decision on that

Hi Yousef, yep, I think you could use the <https://docs.cerbos.dev/cerbos/latest/api/index.html#resources-query-plan|plan resources> API to achieve this. If the principal cannot perform the action on any resource, then the query plan you get back will have `KIND_ALWAYS_DENIED`.