authz-policy-engineer

Implement RBAC and ABAC authorization policies with denial and escalation tests.

Updated Feb 3, 2026

Search Tags:#rbac #software-engineering #abac #security-testing #authz #policy-engineering

Ready to run

npx skills add https://github.com/ricardohg1998-create/Plantilla-repo --skill authz-policy-engineer

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: authz-policy-engineer
Source: https://github.com/ricardohg1998-create/Plantilla-repo/tree/main/.agent/skills/authz-policy-engineer
Command: npx skills add https://github.com/ricardohg1998-create/Plantilla-repo --skill authz-policy-engineer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill implements enforceable authorization policies for applications using RBAC and ABAC with tests.

Core Features & Use Cases

Policy design: Define roles/attributes and centralized policy decisions.
Enforcement: Apply authorization checks across service boundaries.
Testing: Validate denial and escalation paths through automated tests.

Quick Start

Design and implement an authorization policy for your service, define roles and attributes, and add tests that verify denial and escalation paths.

Frequently Asked Questions about authz-policy-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I design enforceable RBAC and ABAC authorization policies for a multi-tenant application?▼

Design enforceable RBAC and ABAC authorization policies by defining user roles and attributes, implementing centralized policy decisions, and applying authorization checks across service boundaries to secure multi-tenant systems.

How do I test authorization escalation paths and denial scenarios in my application?▼

Test authorization escalation paths and denial scenarios by implementing automated tests that validate permission boundaries, ensuring centralized enforcement correctly blocks unauthorized access attempts across service boundaries.

What is centralized authorization enforcement and when do I need it for my service?▼

Centralized authorization enforcement is the process of applying unified RBAC and ABAC policy checks across service boundaries. You need it for authenticated apps and multi-tenant systems to ensure consistent access control.

Does this authorization policy approach support both RBAC and ABAC models?▼

Yes, this authorization policy approach supports both RBAC and ABAC models. It allows you to define specific roles and attributes simultaneously, enabling flexible policy decisions for complex multi-tenant environments.

What is the best way to enforce authorization across service boundaries in a multi-tenant system?▼

The best way to enforce authorization across service boundaries in a multi-tenant system is implementing centralized policy decisions based on defined roles and attributes, validated by automated tests for denial and escalation paths.