How to Get Authorization Right
https://www.permify.co/post/why-decouple-authorizations
In the past few months, we have talked to over 100 engineers from both Fortune 500 companies and startups about their approach to authorization. And we found some common problems. Here's what's hard about authorization, and how to get it right!
Post mentions Z3 and Zanzibar but leaves out ready to go alternatives.
I would recommend https://casbin.org/ - Tons of language SDK's, many integrations with other software, well supported and has good documentation.
Agree, Casbin is a great library. It has a weird language, and we heard from a lot of people that it was hard to use it. (Maybe case-specific reason)