Slightly OT, but is there a similar or better standard for managing authorization more focused on web applications. I see many applications still use RBAC often mixed with application logic.<p>I&#x27;m not sure about OAuth as I don&#x27;t have much experience but I think it doesn&#x27;t scale to fine grained access control.<p>ABAC seems to be a better approach but I see no mainstream implementations of it. There is a company called Axiomatics that apparently has a product but is very hard to get a hands on.