Sign up or log in to watch the video
Un-complicate authorization maintenance
Alex Olivier - 1 month ago
Every application at some point needs to tackle user permissions. It may be early for some systems or much later in others, but one thing for certain is that as soon as you have more than one user type, the logic will slowly evolve into spaghetti code. And then each time you need to update it will take longer and longer to complete. In this talk, we’ll proselytize about why decoupling authorization logic is the absolute best solution to the spaghetti code problem and other common authorization pitfalls. We'll look at real-world(ish) permissions implementations using open-source solutions. We'll try things like adding new role-based access controls to an application and evolving it to fine-grained attribute-based access controls. Along the way, we will run into typical blockers and try out ways to solve them. We'll also look at best practices for authorization (role management, policy evolution, the filtering problem, etc.) and when to just use the most obvious solution.
Jobs with related skills
IT SECU­RITY ENGI­NEER (M/W/D)
ABLE Management Services GmbH
·
2 months ago
Fachinformatiker/System Engineer (m/w/d)
KRÜSS GmbH
·
1 month ago
Hamburg, Germany
Hybrid
IT Security Manager (m/w/d) Schwerpunkt ISMS
ABO Wind AG
·
1 month ago
Wiesbaden, Germany
Hybrid
Cyber Security Analyst (m/w/d)
e.solutions GmbH
·
1 month ago
Ingolstadt, Germany
Hybrid
Related Videos