[esafak]

How do people integrate these authz services with search, with its performance and filtering requirements? It seems like you have to offload search to authz, otherwise you have to deal with pagination-challenging pre- or post-filtering, or incorporate the authz logic into search. You need JOIN semantics, ideally with a context.

[hazalmestci]

i think the key is having declarative policies that describe what access mean, then choosing whether to enforce inline, pre-filter, or batch filter based on latency/consistency tradeoffs

[Sytten]

This is an ad