ABAC vs. ReBAC: An Authorization Policy Showdown

preview_player
Показать описание

​​​Join us live with David Brossard (CTO @ Axiomatics) and Alexandre Babeanu (CTO @3Edges) as we explore advanced authorization models. Gain insights into the differences between Attribute-Based Access Control (ABAC) and Relationship-Based Access Control (ReBAC) and explore the intricacies of fine-grained authorization. Discover the essentials of authorization every software developer should know, the debate between Policy as Code and Policy as Data, and how to design a system that excels in both.

​We’ll cover:
- Attribute vs Relationship-based access control
- What makes authorization fine-grained?
- What are the basics software developers should know about authorization?
- Policy as Code vs. Policy as Data, how to choose?
- Can we design a system that excels both?
- The AuthZen working group
- The future of the Alfa language
- Google Zanzibar's relevancy in 2024
Рекомендации по теме
Комментарии
Автор

if the goal is give power to the entity owner to control access then inherently we need introspection of the relationships, attributes else another "xyz" explosion

NaveenSiddareddy