topaz
Topaz is an open-source authorization service providing fine-grained, real-time, policy-based access control for applications and APIs.https://github.com/aserto-dev/topaz
It uses the Open Policy Agent (OPA) as its decision engine, and provides a built-in directory that is inspired by the Google Zanzibar data model.
Authorization policies can leverage user attributes, group membership, application resources, and relationships between them. All data used for authorization is modeled and stored locally in an embedded database, so authorization decisions can be evaluated quickly and efficiently.