Add Oso to Your Rust App

Authorization in Oso starts with the policy. Authorization policies define the resources that you want to control access to, and rules that specify when an actor (the user making the request) can perform an action on a resource. Because Oso is a library, you can write authorization policies directly over the same data types that are already used in your application.

Add authorization enforcement throughout your application using the authorize API to reject or accept requests that users make.

Polar is Oso's declarative policy language. To use Oso, you model your authorization logic as a set of rules.In this guide, we'll go into more detail on writing rules yourself.

Many applications perform authorization over large collections of data that cannot be loaded into memory. Often index pages showing users a number of resources, like the repositories they can access, will need to use data filtering. The data filtering API provides support for these use cases.