Permify: Open-source authorization as a service Permify is an open-source authorization service that answers access questions at run time: can user X view document Y, which posts can members of team Y edit. It keeps those rules in one place, apart from the application code that would otherwise carry them. Permify follows the design of Google Zanzibar, the authorization system Google runs across its own products. Teams reach for something like it when permissions get specific and start nesting inside each other, and when the same rules have to hold across several applications at once. You write permission rules in Permify’s own language, which covers role-based access control, relationship-based rules, and attribute-based ones. A relationship-based rule grants access through a connection:…