skills.rest
ricardohg1998-create
ricardohg1998-createCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

authz-policy-engineer

Implement RBAC and ABAC authorization policies with denial and escalation tests.

Updated Feb 3, 2026
Search Tags:#rbac#software-engineering#abac#security-testing#authz#policy-engineering
One-click install
npx skills add https://github.com/ricardohg1998-create/Plantilla-repo --skill authz-policy-engineer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: authz-policy-engineer
Source: https://github.com/ricardohg1998-create/Plantilla-repo/tree/main/.agent/skills/authz-policy-engineer
Command: npx skills add https://github.com/ricardohg1998-create/Plantilla-repo --skill authz-policy-engineer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill implements enforceable authorization policies for applications using RBAC and ABAC with tests.

Core Features & Use Cases

  • Policy design: Define roles/attributes and centralized policy decisions.
  • Enforcement: Apply authorization checks across service boundaries.
  • Testing: Validate denial and escalation paths through automated tests.

Quick Start

Design and implement an authorization policy for your service, define roles and attributes, and add tests that verify denial and escalation paths.

Frequently Asked Questions about authz-policy-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design enforceable RBAC and ABAC authorization policies for a multi-tenant application?▼

Design enforceable RBAC and ABAC authorization policies by defining user roles and attributes, implementing centralized policy decisions, and applying authorization checks across service boundaries to secure multi-tenant systems.

How do I test authorization escalation paths and denial scenarios in my application?▼

Test authorization escalation paths and denial scenarios by implementing automated tests that validate permission boundaries, ensuring centralized enforcement correctly blocks unauthorized access attempts across service boundaries.

What is centralized authorization enforcement and when do I need it for my service?▼

Centralized authorization enforcement is the process of applying unified RBAC and ABAC policy checks across service boundaries. You need it for authenticated apps and multi-tenant systems to ensure consistent access control.

Does this authorization policy approach support both RBAC and ABAC models?▼

Yes, this authorization policy approach supports both RBAC and ABAC models. It allows you to define specific roles and attributes simultaneously, enabling flexible policy decisions for complex multi-tenant environments.

What is the best way to enforce authorization across service boundaries in a multi-tenant system?▼

The best way to enforce authorization across service boundaries in a multi-tenant system is implementing centralized policy decisions based on defined roles and attributes, validated by automated tests for denial and escalation paths.

Related Skills

Explore More Software Engineering Skills→
UnitOneAIUnitOneAI
44

rbac-design

Design RBAC/ABAC authorization models against NIST RBAC and SP 800-162.

Official
Intermediate
loren-arthurloren-arthur

temper-agent

Automate state machine execution with policy compliance and verification.

Community
Advanced
PTKDrakePTKDrake
1

laravel-policies

Create and manage Laravel authorization policies with permission enums.

Community
Intermediate
SaidabbosSaidabbos

permission-system

Automate role-based access control in Laravel with Spatie Laravel Permission.

Community
Intermediate