Show HN: Letter – Relationship-based access control (ReBAC) Postgres extension

Category: database

Tags: postgresql, access-control, rebac, database, security

Score: 7.8/10 (Innovation: 8, Technical: 9, Documentation: 7, Utility: 7)

Letter is a PostgreSQL extension that implements relationship-based access control (ReBAC) entirely within the database, using triggers and a planner hook to enforce both write and read permissions based on row relationships. It stands out for its transparent read enforcement and declarative grant system, making fine-grained authorization a first-class database feature rather than an application-layer afterthought.

Target audience: backend developers, database administrators, security engineers

Repository: https://github.com/paulharter/letter · C · MIT · 2 stars

View on Hacker News