OpenFGA — Organisational Hierarchy & Inheritance

Mar 20261 min read

OpenFGA — Organis…

poc-prototype

auth-system

OpenFGA

ReBAC

Hiérarchie

RBAC

Permissions

Sécurité

POC

drag

OpenFGA — Organisational hierarchy — POC

The context. Large structures have rights that flow down the hierarchy: a director sees what their teams see. Hard-coding that is unmanageable.

What I prototype

OpenFGA model: org → department → team → resource, inheritance relations.
Temporary delegation (cover, leave) without duplicating rules.
list-objects queries for "everything this user can see".

OpenFGA · NestJS · PostgreSQL

POC — hierarchical modelling, not deployed to production.

Technologies

OpenFGAReBACHiérarchieRBACPermissionsSécuritéPOC

Also explore

AI POC: a RAG (Retrieval-Augmented Generation) assistant over a document base — embeddings, pgvector, orchestration and guardrails.

DevOps × AI POC: host and serve LLMs privately (Ollama/vLLM) on Kubernetes — inference, scaling and cost.

POC: granular sharing permissions (viewer/commenter/editor), shared links and per-folder inheritance with OpenFGA.