Here's the list of what I read to catch myself up to speed with Zanzibar, a service designed by Google to centrally manage object ACLs.
- Authzed: What is Zanzibar?
- Authzed: New Enemies
- Hacker News discussion on Zanzibar from April 2021
- Hacker News discussion on Zanzibar from May 2019
- Zanzibar: Google’s Consistent, Global Authorization System (the Zanzibar paper)
- Oso: Building Zanzibar from Scratch
- Ory Keto: Open source implementation of Zanzibar