I just listened to the Software Daily podcast on Permit.io and it seemed interesting. I had to implement authorization for a complex enterprise app a decade ago and I wound up coming up with a fairly sophisticated ABAC solution before I even heard the term ABAC. But it does have some limitations and it was a bit difficult to configure. It's that time of year again and I need to add authorization into another enterprise product. I'll definitely give this a whirl before I try rolling my own again.