Authorization Engines

An Authorization Engine is an abstraction over a policy decision point. It's main priority is to provide binary decisions on whether actions are allowed and, in the future, to support partial evaluation of policies which can then be adapted to queries on different data sources (OPA and Oso both support partial evaluation).