We'd like OPA to handle all authorization aspects. NiFi supports an Authorizer interface to plug-in custom authorizers.

This issue is about creating such a custom authorizer that forwards all authorization requests to OPA.
We also decided that OPA should do the group resolution.

The current OPA plugin is available at https://github.com/DavidGitter/nifi-opa-plugin