Primitive RBAC/AAA implementation in nginx config

Server NGINX
1

Hi all -

I spent some time poking at a interesting problem that came up last
night, and ended up with this primitive RBAC system, implemented in
declarative nginx config.

You might find it useful, or might be able to tell me why it sucks
hence how it could be improved :wink:

Readme and config: A primitive Double A (AAA-minus-Accounting) RBAC system implemented in declarative Nginx config · GitHub

Cheers,
Jonathan

Jonathan M.
Oxford, London, UK
http://www.jpluscplusm.com/contact.html

2

On 26 Feb 2014 12:05, “Jonathan M.” [email protected]
wrote:

Hi all -

I spent some time poking at a interesting problem that came up last
night, and ended up with this primitive RBAC system, implemented in
declarative nginx config.

Thanks to the couple of people who reminded me this may not be a
frequently-used term on this list :slight_smile:

Role Based Access Control systems are a technique for limiting access to
resources based on people belonging to groups (roles) and not being
granted
access individually:

In this case, the resources are URIs, potentially proxy_pass’d, and the
users are HTTP basic auth users. My implementation is nothing special,
but
I’d not seen a reasonably scalable one implemented purely in declarative
nginx configuration syntax before :slight_smile:

Anyway, tell me why it sucks …

J