authorization library with a focus on declarative policy definitions

 This library provides an authorization framework with a declarative DSL
 .
 With this library, you can write permission policies that are separate
 from business logic.
 .
 This library is in production use at GitLab.com