What is human-readable authorization

In the complex world of authorization, understanding and managing policies can become a daunting task. Human-readable authorization simplifies this by representing policies in a format that is intuitive and easy to understand, eliminating the need for intricate coding or deep technical knowledge.

Simplicity, transparency and collaboration

• Configuration over coding: Implement and modify authorization policies without delving deep into the application code, ensuring a faster and error-free process.
• Clear and intuitive: With simple YAML policies, understanding and crafting policies becomes a breeze, even for non-technical stakeholders.
• Enhanced collaboration: The clarity of human-readable policies fosters better team collaboration, ensuring everyone is on the same page.
• Audit with ease: The transparent nature of human-readable policies simplifies the audit process, making it easier for security teams to review and validate policies.
• Extensive documentation: Benefit from clear documentation ensuring a smooth integration process.

Sample human-readable policy

        
      
      
apiVersion: api.cerbos.dev/v1
resourcePolicy:
 resource: document
  version: default
  rules:
    - actions:
        - create
      effect: EFFECT_ALLOW
      roles:
        - admin
    - actions:
        - read
      effect: EFFECT_ALLOW
      roles:
        - user
        - admin

This YAML snippet showcases the simplicity and clarity of human-readable policies, making it easy to understand which actions are possible on a resource and under what conditions.