Adding Attribute-Based Access Control to a Real-Time Collaborative App with OpenTDF

The author built Skedoodle, an open-source real-time collaborative sketching app using React, TypeScript, Two.js, and Zustand, but it lacked proper authorization beyond basic authentication. To address this, they integrated OpenTDF's attribute-based access control (ABAC) engine, which evaluates user entitlements against resource attributes via a JSON API without requiring encryption or embedded SDKs. The access model supports sketch ownership, user invitations, collaborator permissions, and centralized policy decisions.