Using OPA for Authorisation in Backstage

[Parsifal-M]

The idea for this is to use OPA for Authorization in Backstage.

We will use the Backstage back-end API on the entities endpoint.

We can use this as our input and then have an OPA container running alongside Backstage with some rego policies to allow or deny certain things like deleting items from the catalog, or restricting the creation of certain entities.

A simplified version would be:

We would define this inside a permissions.ts file.

[Parsifal-M]

This will need to be updated and I will update it because it actually does not work like this.