Ask HN: What do you recommend for implementing access control?

I'm looking for recommendation for separating access control from the core logic of the application. I've looked at a few different open-source solutions, a number of them have their own languages for specifying the policies but I prefer not use a custom language. So far cerbos.dev (using yaml to write policies) seems like a good option.

have you used cerbos.dev or any other access control projects (open-source only)? how's your experience with them?