Drasko DRASKOVIC

References for research and study: https://blog.verygoodsecurity.com/posts/building-a-fine-grained-permission-system-in-a-distributed-environment/ https://www.openpolicyagent.org/ https://www.ory.sh/docs/ecosystem/overview https://github.com/ory/keto/issues/3 https://ccskguide.org/policy-decision-points-policy-enforcement-points/ https://github.com/summerwind/opa-nginx-rbac https://github.com/cloudflare/cfssl https://en.wikipedia.org/wiki/XACML https://en.wikipedia.org/wiki/SAML_2.0 https://en.wikipedia.org/wiki/Attribute-based_access_control https://en.wikipedia.org/wiki/Role-based_access_control https://www.youtube.com/watch?v=XEHeexPpgrA

@nmarcetic - fully agree for the groups - lean and make sense. I also prefer ABAC approach. @anovakovic01 - channels are groups, a poor-man's communication or permission gorups. > Instead...

@chombium I think we should aim for later, because we are targeting enterprise context here. @nmarcetic @anovakovic01 we'll need a spec that describes all of this in a form of...

@chombium we plan opening a repo like [this](https://github.com/ethereum/EIPs). @nmarcetic will add the input and then you can take it from there.

@anovakovic01 I think that MIP issue has to be officially opened.

For the reference, comparison Casbin vs OPA: https://github.com/ory/keto/issues/47#issuecomment-419764819 Also, I noticed that it can be done as a library: https://www.openpolicyagent.org/docs/latest/#5-try-opa-as-a-go-library

@mteodor how are we doing with this one? Can you please explain here what has been done in https://github.com/mainflux/mainflux/pull/1228 and what are the future plans.

@dusanb94 do not forget to close this one once group migration is done.

I am not sure if we can make ID format optional - it is not good idea, can create havoc :). But it would not be so hard to replace...

Great to hear that you've found a workaround. We are always striving in making Mainflux better and more complete, we just need to estimate where is good to make an...