easy-rbac-team / easyrbac Goto Github PK

Casbin.NET is an authorization library that supports models like ACL, RBAC, ABAC.

Related to RBAC, casbin has several advantages:

1. roles can be cascaded, aka roles can have roles.
2. support resource roles, so users have their roles and resource have their roles too. role = group here.
3. the permission assignments (or policy in casbin's language) can be persisted in files or database.
4. multiple models like ACL, BLP, RBAC, ABAC, RESTful are supported.

And you can even customize your own access control model, for example, mix RBAC and ABAC together by using roles and attributes at the same time. It's very flexible.

I saw there's a DB connection need here: #5, and I think Casbin.NET is a good choice to solve it as it supports a lot of DBs with simple configuration. The DB table can be synced automatically. What do you think? Thanks.

资源与用户关联，个人认为这是一个图省事和偷懒的设计。因为用户与角色已经有一种关系，而角色与资源也有一种关系，完全可以实现这样的关联设计。而通过资源与用户直接关联，跨过这种设计有关系，一是在设计上是冗余的；二是在设计上也显得有些混乱；用户完全是有一种角色的，只要是存在于系统当中，否则他是一种凭空的存在吗？这是比强牵强的，设计线还是要清晰比较好。

项目捣鼓着跑起来了，但是有很多细节的东西没有描述。
例如

1. 运行环境 ：.NET Core + MySql；
2. 登陆账号密码
3. 前后端项目运行的步骤
4. 相关RBAC设计理念介绍。

如果有关联博文的话，是否可以发个链接学习一下？

刚开始报：表“application_callback_config"不存在，后来根据Model手动建立了，但用admin登录，返回:{"callbackUrl":null,"callbackType":null}。
页面提示“APPCode错误”,请问需要怎么设置？

请问可以上传一下application_callback_config这个表吗