it works group

What do you think about using an external solution for authorization? It's widely used and open source. We could enhance our tools with this and get rid of unnecessary group/role handling from our side.

This could be a good fit to get insights in our vulnerabilities. What do you think? Any experience on this or similar solutions?