graph-based Access Control Lists
External Consistency
Based on GCP Spanner, External Consistency uses a timestamp token called Zookie to always guarantee the order of "ACL change → content change" to prevent new enemy problem
Paper
What is Zanzibar?
Update Jul 29, 2021: I gave a talk on Zanizbar for Papers We Love and the video is now available: Lately there has been a lot of talk about Zanzibar that gets sent my way. I guess this is to be expected when you found a company based on the Zanzibar paper.
https://authzed.com/blog/what-is-zanzibar/

Zanzibar: Google’s Consistent, Global Authorization System | USENIX
Ruoming Pang, Ramon Caceres, Mike Burrows, Zhifeng Chen, Pratik Dave, Nathan Germer, Alexander Golynski, Kevin Graney, and Nina Kang, Google; Lea Kissner, Humu, Inc.; Jeffrey L. Korn, Google; Abhishek Parmar, Carbon, Inc.; Christina D. Richards and Mengzhi Wang, Google
https://www.usenix.org/conference/atc19/presentation/pang

Seonglae Cho