Batteries-Included Framework for Application Authorization
Oso is a batteries-included framework for building authorization in your application.
With Oso, you can:
- Model: Set up common permissions patterns like RBAC and
relationships using Oso’s built-in primitives. Extend them however you
need with Oso’s declarative policy language, Polar.
- Filter: Go beyond yes/no authorization questions. Implement
authorization over collections too - e.g., “Show me only the records
that Juno can see.”
- Test: Write unit tests over your authorization logic now that you
have a single interface for it. Use the debugger or tracing to track
down unexpected behavior.
Oso in Action
Oso lets you write policies to control who can do what in your app.
Select different policies below to see how they change the permissions
in the sample app on the right.