"ALFA for defining fine-grained authorization rules in a JSON-like policy language (compiles down to XACML)" nordicapis.com/building-a-sec…