terraform-google-modules / terraform-google-cloud-storage
Creates one or more Cloud Storage buckets and assigns basic permissions on them to arbitrary users
terraform-google-modules / terraform-google-cloud-storage
permissionlesstech / bitchat
bluetooth mesh chat, IRC vibes
apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
hyperledger / fabric
Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. Its modular and versatile design satisfies a broad range of industry use cases. It offers a unique approach to consensus that enables performance at scale while preserving privacy.
canopy-network / canopy
The official go implementation of the Canopy Network protocol
spatie / laravel-permission
Associate users with roles and permissions
instantdb / instant
Instant is the best backend for AI-coded apps. You get auth, permissions, storage, presence, and streams — everything you need to ship apps your users will love.
permissionlesstech / bitchat-android
decentralized mesh chat
ixartz / SaaS-Boilerplate
🚀🎉📚 SaaS Boilerplate built with Next.js + Tailwind CSS + Shadcn UI + TypeScript. ⚡️ Full-stack React application with Auth, Multi-tenancy, Roles & Permissions, i18n, Landing Page, DB, Logging, Testing
deepstreamIO / deepstream.io
deepstream.io server
authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
stalniy / casl
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
pig-mesh / pig
↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.
openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
ai-boost / awesome-harness-engineering
Awesome list for AI agent harness engineering: tools, patterns, evals, memory, MCP, permissions, observability, and orchestration.
cerbos / cerbos
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
zoontek / react-native-permissions
An unified permissions API for React Native on iOS, Android and Windows.
iamr0s / Dhizuku
A tool that can share DeviceOwner permissions to other application.
django-guardian / django-guardian
Per object permissions for Django
pipeshub-ai / pipeshub-ai
The open-source context layer for AI agents. PipesHub turns your company's knowledge (Slack, Drive, Jira, GitHub, Microsoft 365 and 40+ connectors) into a permission-aware workspace that agents can search, grep, navigate and cite. MCP, SDKs and built-in agents. Self-hosted.
maticzav / graphql-shield
🛡 A GraphQL tool to ease the creation of permission layer.
cosmicstack-labs / mercury-agent
Soul-driven AI agent with permission-hardened tools, token budgets, and multi-channel access. Runs 24/7 from CLI, Telegram or More.
robinrodricks / FluentFTP
An FTP and FTPS client for .NET & .NET Standard, optimized for speed. Provides extensive FTP commands, File uploads/downloads, SSL/TLS connections, Automatic directory listing parsing, File hashing/checksums, File permissions/CHMOD, FTP proxies, FXP support, UTF-8 support, Async/await support, Powershell support and more. Written entirely in C#.
jeremykenedy / laravel-auth
A complete Laravel 13 application foundation: email verification, social sign in, roles and permissions, user profiles, and admin user management.
zenstackhq / zenstack
Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services
apache / casbin-node-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
bezhanSalleh / filament-shield
The easiest and most intuitive way to add access management to your Filament Panel; Resources, Pages & Widgets through `spatie/laravel-permission`
apache / casbin-jcasbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Java
FISCO-BCOS / FISCO-BCOS
FISCO BCOS（发音为/ˈfɪskl bi:ˈkɒz/）是一个稳定、高效、安全的许可区块链平台，已被广泛应用于现实的行业应用。截至目前，已拥有5000多家企事业单位，400多个产业数字化标杆应用，涵盖文化版权、司法服务、政府服务、物联网、金融、智慧社区、房地产建设、社区治理、乡村振兴等领域。FISCO BCOS (pronounced /ˈfɪskl bi:ˈkɒz/) is a stable, efficient, and secure permissioned blockchain platform that has been widely used in real-world industry applications.
onury / accesscontrol
Role and Attribute based Access Control for Node.js
LuckPerms / LuckPerms
A permissions plugin for Minecraft servers.
Baseflow / flutter-permission-handler
Permission plugin for Flutter. This plugin provides a cross-platform (iOS, Android) API to request and check permissions.
Alinto / sogo
SOGo is a very fast and scalable modern collaboration suite (groupware). It offers calendaring, address book management, and a full-featured Webmail client along with resource sharing and permission handling. It also makes use of documented standards (IMAP, CalDAV, CardDAV, etc.) and thereby provides native connectivity (without plugins) to many clients such as Microsoft Outlook, Apple iCal, the iPhone, Mozilla Lightning, and a plethora of mobile devices.
SaiAkhil066 / CORTEX-AI-SUPER-RAG
CORTEX RAG is an enterprise retrieval and knowledge assistant that helps teams find accurate answers from company data with citations, permission-aware retrieval, and fast deployment
tchx84 / Flatseal
Manage Flatpak permissions
apache / casbin-pycasbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Python
MohamedRejeb / Calf
Calf is a library that allows you to easily create adaptive UIs and access platform specific APIs with Compose Multiplatform (Adaptive UI, File Picker, WebView, Permissions...).
Petterpx / FloatingX
Android上强大的悬浮窗组件，支持 系统浮窗(需要权限)、应用内浮窗(无权限)、局部悬浮(View)，支持边缘吸附、回弹、自定义动画、位置保存、窗口化及分屏后位置修复等。Android without permission suspension window(App), support global(View), local suspension, support edge adsorption, rebound, custom animation, position saving, windowing and split-screen position repair.
ethersphere / bee
Bee is a Swarm client implemented in Go. It’s the basic building block for the Swarm network: a private; decentralized; and self-sustaining network for permissionless publishing and access to your (application) data.
DavHau / nix-portable
Nix - Static, Permissionless, Installation-free, Pre-configured
Anil-matcha / awesome-muse-connectors
A source-backed catalog of Meta Muse integrations and community connector skills, with capability, authentication, and permission notes.
Gentleman-Programming / gentle-shell
Your coding agent for controlled development in the workspace you lead. A Pi-native shell with Organic Driven Development, focused subagents, risk-based native review, live changes and agent views, and permission modes that keep destructive guards.
apache / casbin-Casbin.NET
An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)
php-casbin / php-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .
affaan-m / agentshield
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️
mokshablr / gander
Take a gander at any file. Offline, zero-permission Android viewer for PDF, Word, Excel, PowerPoint, ODT, RTF, ZIP, STL, photos, video, audio, Markdown and code.
nervosnetwork / ckb
The Nervos CKB is a public permissionless blockchain, and the layer 1 of Nervos network.
nestjsx / nest-access-control
Role and Attribute based Access Control for Nestjs 🔐
apache / casbin-rs
An authorization library that supports access control models like ACL, RBAC, ABAC in Rust
Ryder-Sun / Meldwork
Local-first AI agent workspace for multi-agent collaboration, agent orchestration, scoped permissions, evidence-aware runs, and human-in-the-loop decisions.
jeremykenedy / laravel-roles
Role-Based Access Control (RBAC) for Laravel. Roles, permissions and role levels. Supports Laravel 5.3 through 13.
GrapheneOS / PdfViewer
Simple Android PDF viewer based on pdf.js and content providers. The app doesn't require any permissions. The PDF stream is fed into the sandboxed WebView without giving it access to content or files. CSP is used to enforce that the JavaScript and styling properties within the WebView are entirely static.
TechNomadCode / AI-Product-Development-Toolkit
Plan, build and launch products with AI: guided planning prompts, an AI App Starter for Next.js, Supabase and Vercel, and agent configurations.
ConardLi / easy-agent
Production-ready open source terminal coding agent with readable, layered code: permission rules, OS sandboxing, MCP, skills, sub-agents, and Anthropic, OpenAI-compatible, Gemini, or local models.
microsoft / wassette
Wassette: A security-oriented runtime that runs WebAssembly Components via MCP
JamesWoolfenden / pike
Pike is a tool for determining the permissions or policy required for IAC code
mohak34 / opencode-notifier
OpenCode plugin for desktop notifications and sounds on permission, completion, and error events.
mirfatif / PermissionManagerX
eXtended Permission Manager for Android - view, set, watch Manifest Permissions and AppOps
peass-ng / CloudPEASS
Red Team scripts to find the permissions assigned to a compromised principal in AWS, GCP, Azure and Kubernetes.