RBAC System

$9.99

Complete role-based access control system with hierarchical roles, granular permissions, resource-level policies, and an enforcement engine. Supports role inheritance, wildcard permissions, deny-overrides, and audit logging. Runs on Python 3.10+ stdlib only.

• Hierarchical roles with inheritance (admin > editor > viewer)
• Granular permissions: resource:action (e.g., posts:write)
• Wildcard permissions: posts:* grants all post actions
• Deny-override: explicit deny beats any allow
• Resource-level policies with condition evaluation
• JSON-based policy storage with validation
• CLI tool for role and permission management

# Check if a user has permission
python main.py check --user alice --permission posts:write

# List all roles and their permissions
python main.py roles --list

# Assign a role to a user
python main.py assign --user bob --role editor