Ask HN: How to implement ABAC authorization for enterprise applications?

Past couple of days I was learning a bit about ABAC policy languages and some of the libraries. One of the most starred library in Github on the topic ABAC is 'Casbin' which uses a PERM model instead of the standard XACML. I did a POC using Casbin.NET and I find it very easy to understand and implement. When discussed with our senior architect, his opinion is to use the standard specification (XACML) and recommended Authzforce. If you have experience in any of the aforesaid technologies, please share your views.