Two-Point Authorization Engine with Revocable Sharing for Multitenant Environments
The access-kit is presented, an in-process authorization engine for the .NET platform built on an explicit model: principals, “area:verb” actions, composable deny-wins policy statements with inheritance, and a resource hierarchy, and an analytic cost model and an evaluation measured on PostgreSQL.