I'm very interested in attribute-based encryption (ABE). I see various working examples online, and I want to know, has it been verified as production-ready? What does it mean to have a security audit, and how do I know if ABE is safe for use with real customer data?
The use case I have in mind is for powering role-based access control (RBAC) within a general-purpose framework for building apps. Example: David has built a cool diagramming and visualization app using a framework which implements RBAC using ABE, and he's deployed it to the cloud. Now Bob has used David's app to make a cool diagram, and he wants to give Alice read and write access to this document. He also wants to share it with Chelsea, but he wants her to have read-only access.