Collaborative SaaS platforms with nested folders, shared workspaces, external guest links, and complex organizational hierarchies frequently outgrow simple role enums and search to hire a freelance Google Zanzibar ReBAC / ABAC authorization (OpenFGA, SpiceDB, Permify, Cerbos, Casbin) programmer. I am Aldian Fazrihady, a Senior Freelance Backend & Security Programmer.
Core Relationship-Based (ReBAC) & Policy-Based Authorization Capabilities
- Google Zanzibar Tuple Modeling (OpenFGA / SpiceDB): Designing inheritance graphs (`user -> member of group -> editor of parent_folder -> viewer of document`) with sub-5ms `Check` and `ListObjects` lookups.
- RAG & Vector Search Permission Pre-Filtering: Ensuring AI retrieval queries ONLY surface documents that the requesting user is authorized to view according to live Zanzibar/RLS permissions.
- Stateless Policy Engines (Cerbos / OPA Rego / Casbin): Decoupling complex authorization logic from application controllers across Go, Python, and TypeScript microservices.
Frequently Asked Questions
How do you paginate a PostgreSQL table when permissions live in OpenFGA or SpiceDB?
I combine `ListObjects` / materialized permission lookup tables with PostgreSQL `JOIN`s or push down tenant/workspace predicates so cursor pagination remains fast and accurate.
How do I hire you for OpenFGA, SpiceDB, or enterprise RBAC architecture?
Hire me via Upwork.