Go to file
Paul Zinselmeyer bffd616a84 version change 2023-12-14 15:41:47 +01:00
rebacdb version change 2023-12-14 15:41:47 +01:00
rebacserver fixed documentation 2023-12-14 15:40:42 +01:00
.drone.yml revert global nix store 2023-09-05 21:46:27 +02:00
.gitignore split graph implementation into rebacs_core 2023-09-05 17:14:37 +02:00
Cargo.lock fixed documentation 2023-12-14 15:40:42 +01:00
Cargo.toml workspace version change 2023-12-14 15:41:18 +01:00
README.md update readme 2023-12-08 16:26:21 +01:00
flake.lock openid connect integration 2023-08-27 22:10:16 +02:00
flake.nix hydra job 2023-09-28 17:48:16 +02:00


This library implements a in-memory relationship-based access control dababase, that was inspired by Google's Zanzibar.



A Object is a tuple of the values (namespace, id). It represents a object like a user. Example: (users, alice).


A Set is a tuple of the values (namespace, id, permission). It represents a permission for a Object. Example: (files, foo.pdf, read).


The RelationGraph-struct contains a graph of all relationships. Relationships can be created between:

  • Object and Set => user alice can read the file foo.pdf.
  • Set and Set => everyone who can read the file foo.pdf can read the file bar.pdf.


  • The *-id is used as a wildcard id to create a virtual relation from this id to every other id in the namespace. Example: (user, alice) -> (file, *, read) => user alice can read every file


  • implement raft protocol to allow ha deployment


A basic gRPC based server for interacting with the database can be found in the git repository.


I'm happy about any contribution in any form. Feel free to submit feature requests and bug reports using a GitHub Issue. PR's are also appreciated.


This Library is licensed under LGPLv3.