I had the possibility of working at a project where we required fully configurable RBAC system capable of showing partial data for a user based on his context. I implemented at that time from scratch, guided by a white paper, I was wondering if something like that exists in elixir ecosystem currently?

As an example let’s say we have an organization entity, now each user assigned to a specific organization can see only the local data to that organization (related to how all users you create can see buckets created by you and not system wide in S3).

Now in terms of policies, there are 2 kinds (the names might be different in literature):

1. General access policies (an example would be the possibility to add new data, policies like these are always used in frontend to either show/hide some part of functionality)
2. Granular policies (an example of such policy is how you allow an user to have access only to one or more specific buckets in s3)

The requirements of the system we needed were the following (as to make it clear what kind of system is in place):

1. Policies should be configurable at runtime from frontend; (just like you can configure AWS policies)
2. Partial data access is not applicable to only one table. (ideally it should work correctly when the data is aggregated too)

Since finding a library for such a topic is harder than it seems, I was wondering if any of you have done something similar and know any libraries that can achieve this in elixir?

If not I was thinking about polishing the concept and releasing a library for painless dealing with this problem, as I find that I always arrive at the conclusion that 1 of 3 projects I do start as simple RBAC concepts and in the end with a custom implementation of this concept at database level.