Issues

• CachedEnforcer keys decisions on the request tuple alone, so a grant under one [matchers] section authorises the same request under every other section

  apache/casbin-rs#431 · Filter by author Eh2406 opened on Sep 29, 2026

• CachedEnforcer's decision cache is never invalidated, so revoked access keeps being granted

  apache/casbin-rs#430 · Filter by author Eh2406 opened on Sep 29, 2026

• cache is keyed on a 64-bit unkeyed DefaultHasher digest and never re-checks the tuple

  apache/casbin-rs#429 · Filter by author Eh2406 opened on Sep 29, 2026

• the matcher can "return allow" and enforce() fails open, when Empty policy set is evaluated

  apache/casbin-rs#428 · Filter by author Eh2406 opened on Sep 29, 2026

• Cross-domain role links copied into concrete domain graphs are never removed

  apache/casbin-rs#427 · Filter by author Eh2406 opened on Sep 29, 2026

• rejected mutation still authorizes grants

  apache/casbin-rs#426 · Filter by author Eh2406 opened on Sep 28, 2026
  1

• Grouping namespace confusion grants unauthorized RBAC roles.

  apache/casbin-rs#425 · Filter by author Eh2406 opened on Sep 28, 2026

• panicking the enforcement call on any non-ASCII request

  apache/casbin-rs#424 · Filter by author Eh2406 opened on Sep 28, 2026

• [feature] Python bindings via PyO3

  question
  apache/casbin-rs#418 · Filter by author martinadamsdev opened on Mar 22, 2026
  1

  

• [feature] compile Casbin-RS into WASM

  apache/casbin-rs#348 · Filter by author nomeguy opened on Nov 28, 2024