Integration with Google Zanzibar inspired Authorization Frameworks like OpenFGA, SpiceDB, Ory Keto

[keshavkaul]

Could someone provide any thoughts on how OPAL can integrate with Google Zanzibar inspired Authorization Frameworks like OpenFGA, SpiceDB, Ory Keto. Please direct me to a link if this is explained elsewhere.

I'm looking for an Authorization system and evaluating options and OPAL seems like a good candidate for Authorization Policy Management.

[orweis]

Hi @keshavkaul :)

This is a direction we are looking to promote more, as it closely mimic what we do with Permit itself (Permit cloud itself is also a Google Zanzibar equivalent)

The way to implement this with OPAL is to add OpenFGA, SpiceDB, Ory, etc. as policy-stores, which would allow OPAL to sync data/policy to them on the fly - as it does for OPA and Cedar.

It is on our roadmap, but we'd love to see this as a contribution if you feel like taking a stab at it with a PR.
We'd of course be happy to provide guidance.