Archive for Apr 2023

2 entries

OAuth and Fine-grained Access Control

Tue Apr 18 16:31:00 2023

If you're building an application that allows sharing among its users of whatever resources they build, then you need the fine-grained permissioning that a policy-based access control system provides.
Continue reading...

Minimal vs Fully Qualified Access Requests

Tue Apr 4 09:29:00 2023

By creating fully qualified authorization contexts from minimal requests, a policy information point reduces the burden on developers building or integrating policy enforcement points, allows for more flexible and reusable policies, and enriches authorization contexts to allow more precise access decisions.
Continue reading...