User security: ABAC


I have seen some talk about ACL security (Adding security to dgraph) but it doesn’t seem to be there in the latest version and also it isn’t on the roadmap (as far as I can see).

What is the status on this?
Is there any idea to go to a more “modern” system like ABAC (
Are there any studies on performance impact?


ACL is in our long term roadmap, not in 2018.

Any specific reason why you wouldn’t go with some library like Casbin?

We haven’t started planning the implementation of ACL. Casbin looks interesting, we’ll consider it when we start building ACL.