Permify 1.0
Infrastructure
authorization service
SHOW HN2024
154points
34comments
#547of 3,515 in 2024
Top 16%of 2024 by points
How HN took it
CuriousMostly questions and neutral comments
4 positive, 28 neutral or asking, 0 mixed, 1 critical, out of 33 comments about the project. Thread score +0.12.
Idea: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Open source approach to a critical problem
From 2 comments
Authorization is such a critical yet underappreciated part of system design. It's great to see open source projects tackling this space. I'll definitely be checking this out for…
nkko on HNPermify is a great product solving real auth problems, and the best part? Open source!
ijebusoma on HN
Good Zanzibar-based design with multi-tenancy and contextual permissions
From 1 comment
Hi thanks for the support! I'm one of the founders at Permify. Both products may seem alike at first glance as you described, but there are a few key differences, Multi Tenancy:…
EgeAytin on HN
Objections
Centralizing authorization data is hard to keep in sync with application data
From 3 comments
This is the single-biggest drawback to purely Zanzibar-based architectures. The problem with requiring the authorization system to own all authorization data is that there’s…
gneray on HNThere is one thing I'd like to know about this general approach of centralising permission data. I guess my question applies to Permify as well as to its various competitors:…
akrauss on HNYou call this an anti-pattern (and rightfully so, since cluttering application code like this is a nightmare), but then what is the better pattern? In an app with >100 entities…
akrauss on HN
Crowded space with many Zanzibar implementations
From 1 comment
How do you compare to the many other Zanzibar open source implementations like keto, spicedb, topaz, warrant, etc. It seems like it is a crowded space.
Sytten on HN
Requests
Support for CockroachDB and other multi-region databases
From 1 comment
Thanks for the support, and don't hesitate to join our Discord community[0] for further questions. Regarding multi-region deployment, we offer PostgreSQL as the production…
EgeAytin on HN
Rollback support for snapshots
From 1 comment
Actually we have webhooks in our cloud offering to streamline and address this. Since this post is about our open source, I didn't mention it as an option. However, if you choose…
EgeAytin on HN
Questions
How it handles multi-region deployments
From 1 comment
Authorization is such a critical yet underappreciated part of system design. It's great to see open source projects tackling this space. I'll definitely be checking this out for…
nkko on HN
How to filter search results by permissions
From 1 comment
Let's say I want to use the model outlined in the "File Storage" example. I set up and populate my permission DB accordingly with file permissions, organization and group…
rzzzt on HN
Comparison with OpenFGA, SpiceDB, Casbin and Keycloak
From 4 comments
How does this compare to auth0's OpenFGA (based on Zanzibar)? https://openfga.dev
cmcconomy on HNVery cool! At first glance this looks a lot like SpiceDB, which is also a Go service based on Zanzibar. Excited to see more entrants in the space, can you talk a bit about what…
aduffy on HNSo is this something similar to casbin? What are benefits and caveats of permify compared to auth libraries like casbin?
mindigow on HNHow does it play with Keycloak's Authorization Services? Or in other words - why should I choose permify over Keycloak?…
shahargl on HN
Alternatives named
OpenFGA
From 1 comment
How does this compare to auth0's OpenFGA (based on Zanzibar)? https://openfga.dev
cmcconomy on HN
SpiceDB
From 1 comment
Very cool! At first glance this looks a lot like SpiceDB, which is also a Go service based on Zanzibar. Excited to see more entrants in the space, can you talk a bit about what…
aduffy on HN
Casbin
From 1 comment
So is this something similar to casbin? What are benefits and caveats of permify compared to auth libraries like casbin?
mindigow on HN
Keycloak Authorization Services
From 1 comment
How does it play with Keycloak's Authorization Services? Or in other words - why should I choose permify over Keycloak?…
shahargl on HN
Keto and Topaz
From 1 comment
How do you compare to the many other Zanzibar open source implementations like keto, spicedb, topaz, warrant, etc. It seems like it is a crowded space.
Sytten on HN