Making of the Ory Permissions Language
summary
OPL is a typed, declarative rule language added to Ory Keto and Ory Network Permissions that expresses implicit permissions (like role-derived delete vs edit) so apps stop duplicating logic across frontends and microservices. Design relies on hour-long user interviews and competitor analysis; implementation parses a subset of TypeScript into an AST (parser took about a week), runs an interpreter rather than executing arbitrary code, and already gives VS Code and console autocompletion with context objects and a roadmap for testing, linting, visualization and migrations.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 0:22Zanzibar and Keto context
- 3:05Need for a rule language
- 4:32Development process
- 6:00Requirements and goals
- 7:25Exploring design options
- 11:41Language design takeaways
- 14:20Adopting TypeScript
- 17:54Implementation details
- 19:28Launch and usage
- 21:42Roadmap and future plans
- 23:42Q&A and conclusion
