{"slug": "casbin", "name": "Casbin", "category": "dev-libs", "category_name": "Libraries and frameworks", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.601, "rising": 0.35, "first": "2025-12-19", "latest": "2026-08-26", "why": "Check out ReBAC and ABAC authorization models and also implementations like apache/casbin or authzed/spicedb.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 2, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Check out ReBAC and ABAC authorization models and also implementations like apache/casbin or authzed/spicedb.", "kind": "", "icon": true, "domain": null, "github_repo": "github.com/casbin/casbin", "official_url": "https://casbin.org", "pricing": "", "aliases": ["Casbin"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 791098848, "item_id": 49443678, "url": "https://news.ycombinator.com/item?id=49443678", "by": "infogulch", "date": "2026-08-26", "stance": "recommend", "quote": "Check out ReBAC and ABAC authorization models and also implementations like apache/casbin or authzed/spicedb.", "excerpt": "Modern authorization systems are often graph-based. Check out ReBAC and ABAC authorization models and also implementations like apache/casbin or authzed/spicedb. These schemas often have surprisingly simple graph definitions; I bet they could be replicated in LatticeDB without much trouble.", "context": "", "use_case": "graph-based authorization", "switched_from": "", "story": "Show HN: LatticeDB \u2013 Like SQLite but for graph databases"}, {"id": 742423696, "item_id": 46401481, "url": "https://news.ycombinator.com/item?id=46401481", "by": "hsluoyz", "date": "2025-12-27", "stance": "recommend", "quote": "Worth mentioning Casbin as well", "excerpt": "Worth mentioning Casbin as well (https://github.com/casbin/casbin) - it's been around for a while and takes a slightly different approach. Instead of being purely Zanzibar-inspired, it uses a PERM (Policy, Effect, Request, Matchers) metamodel that lets you implement RBAC, ABAC, or ReBAC depending on what fits your use case.", "context": "", "use_case": "Authorization policies (RBAC/ABAC/ReBAC)", "switched_from": "", "story": "Permission Systems for Enterprise That Scale"}, {"id": 741185729, "item_id": 46324108, "url": "https://news.ycombinator.com/item?id=46324108", "by": "tonyhart7", "date": "2025-12-19", "stance": "recommend", "quote": "I use casdoor with casbin, very happy with it", "excerpt": "I use casdoor with casbin, very happy with it", "context": "", "use_case": "", "switched_from": "", "story": "Top Open Source Authorization Libraries (2024)"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["graph-based authorization", "authorization policies (rbac/abac/rebac)"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49437049", "title": "Show HN: LatticeDB \u2013 Like SQLite but for graph databases", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46374117", "title": "Permission Systems for Enterprise That Scale", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46276470", "title": "Top Open Source Authorization Libraries (2024)", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"recommend": 2}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {"recommend": 1}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 791098848, "item_id": 49443678, "url": "https://news.ycombinator.com/item?id=49443678", "by": "infogulch", "date": "2026-08-26", "stance": "recommend", "quote": "Check out ReBAC and ABAC authorization models and also implementations like apache/casbin or authzed/spicedb.", "excerpt": "Modern authorization systems are often graph-based. Check out ReBAC and ABAC authorization models and also implementations like apache/casbin or authzed/spicedb. These schemas often have surprisingly simple graph definitions; I bet they could be replicated in LatticeDB without much trouble.", "context": "", "use_case": "graph-based authorization", "switched_from": "", "story": "Show HN: LatticeDB \u2013 Like SQLite but for graph databases"}, {"id": 742423696, "item_id": 46401481, "url": "https://news.ycombinator.com/item?id=46401481", "by": "hsluoyz", "date": "2025-12-27", "stance": "recommend", "quote": "Worth mentioning Casbin as well", "excerpt": "Worth mentioning Casbin as well (https://github.com/casbin/casbin) - it's been around for a while and takes a slightly different approach. Instead of being purely Zanzibar-inspired, it uses a PERM (Policy, Effect, Request, Matchers) metamodel that lets you implement RBAC, ABAC, or ReBAC depending on what fits your use case.", "context": "", "use_case": "Authorization policies (RBAC/ABAC/ReBAC)", "switched_from": "", "story": "Permission Systems for Enterprise That Scale"}, {"id": 741185729, "item_id": 46324108, "url": "https://news.ycombinator.com/item?id=46324108", "by": "tonyhart7", "date": "2025-12-19", "stance": "recommend", "quote": "I use casdoor with casbin, very happy with it", "excerpt": "I use casdoor with casbin, very happy with it", "context": "", "use_case": "", "switched_from": "", "story": "Top Open Source Authorization Libraries (2024)"}]}