Library: PropAuth (Property-based policy evaluation)I’ve been working on a library for a while now that kind of distills down some of the ideas of property-based authorization (like XACML) and makes it a bit more accessible to the average developer. Property-based evaluation can be a little tricky to get your head around if you’re used to the usual RBAC world. Property-based evaluation is more or less what it sounds like: a system checks the properties of an object (or objects) and looks for different kinds of matches. The “evaluate” method is then called and a true/false result is returned…in this case true as our “myUser” object has a matching username. This only scratches the surface of what the PropAuth library can do but it gives you an idea of how the evaluations are set up.