bodyguard

Authorization logic is embedded directly in Phoenix context modules, keeping business rules close to the code that enforces them, as shown in the blog example where MyApp.Blog implements Bodyguard.Policy.

The Bodyguard.Schema behaviour automatically filters database results based on user permissions, preventing data leaks without manual query adjustments, demonstrated in the Post.scope/3 callback.

It works out-of-the-box with controllers via action_fallback, LiveView mount/handle_event, plugs for pipeline checks, and includes testing utilities, ensuring consistent authorization across the entire application.

Policies can be separated into dedicated modules using defdelegate, allowing for better code organization while maintaining the same interface, as mentioned in the policy delegation section.