September 2022 Summaries

Permit.io has introduced a low-code Attribute Based Access Control (ABAC) solution, marking a significant development in access control technology. As applications become more complex, traditional methods of managing access control, such as Role Based Access Control (RBAC), are proving inadequate for handling intricate policies related to billing, location, and risk profiles. Previously, implementing ABAC required complex coding, limiting its accessibility to developers and excluding other stakeholders. Permit.io's new solution simplifies ABAC by breaking it into user-friendly components that non-technical users can manage, akin to RBAC's simplicity. This innovation allows for a smoother transition from RBAC to ABAC, empowering entire teams, including non-developers and customers, to independently manage access control. The low-code interface ensures that while developers can customize policies, it is not a necessity for effective implementation, thus broadening participation in access management and encouraging innovation in software development.

Permit.io offers a seamless integration with Kong Gateway to manage API permissions without needing to write code, streamlining the process of implementing authorization models such as RBAC and ABAC. This integration allows users to configure permissions quickly and efficiently by using methods as actions and translating request paths into resource names. By leveraging the Open Policy Agent (OPA) and a Policy Decision Point (PDP) setup, Permit.io ensures fast and independent authorization decisions, even when disconnected from the internet. Users can easily configure Kong Gateway to utilize Permit.io's permission engine, empowering non-technical personnel to manage permissions through an intuitive user interface. This integration demonstrates how Permit.io can simplify the addition of permissions to Kong-based applications, returning 403 errors for unauthorized requests and logging decisions for transparency.