Authorization Models Skill

Overview

This skill provides comprehensive guidance on authorization models and access control patterns. Authorization determines what authenticated users can do within a system.

Key Principle: Authorization should be declarative, centralized, and auditable.

When to Use This Skill

• Designing a permission system from scratch
• Choosing between RBAC, ABAC, ACL, or ReBAC
• Implementing policy-as-code with OPA
• Migrating from simple role checks to fine-grained authorization
• Implementing the principle of least privilege
• Designing multi-tenant authorization
• Building a Zanzibar-style permission system

Authorization Model Comparison