DEV Community

#authorization

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
alf.io's API key role bug is a privilege-model problem

alf.io's API key role bug is a privilege-model problem

Comments
3 min read
RabbitMQ virtual hosts are partitions, not a complete authorization boundary

RabbitMQ virtual hosts are partitions, not a complete authorization boundary

Comments
4 min read
Registry tokens make repository scope the real authorization boundary

Registry tokens make repository scope the real authorization boundary

Comments
4 min read
OroCRM business-unit hierarchy is part of the exposure boundary

OroCRM business-unit hierarchy is part of the exposure boundary

Comments
3 min read
Permission-heavy multi-tenant systems: make the access check boring

Permission-heavy multi-tenant systems: make the access check boring

Comments
6 min read
Flarum API Tokens Deserve Actor-Level Review

Flarum API Tokens Deserve Actor-Level Review

Comments
2 min read
Authentication and Authorization: What's New in .NET 11

Authentication and Authorization: What's New in .NET 11

Comments
6 min read
Giving AI Agents Least Privilege

Giving AI Agents Least Privilege

Comments
2 min read
Fifty-three SpiceDB titles mark an authorization service that should not face the internet

Fifty-three SpiceDB titles mark an authorization service that should not face the internet

Comments
2 min read
JWT verifiers need an explicit token-purpose policy

JWT verifiers need an explicit token-purpose policy

Comments
3 min read
OpenAPI security schemes describe credentials while servers enforce authorization

OpenAPI security schemes describe credentials while servers enforce authorization

Comments
3 min read
Grafana viewers can reach more data than a dashboard shows

Grafana viewers can reach more data than a dashboard shows

Comments
3 min read
Elasticsearch API keys inherit an identity as well as a privilege list

Elasticsearch API keys inherit an identity as well as a privilege list

Comments
4 min read
Authorizing AI Agent Chains in Production

Authorizing AI Agent Chains in Production

Comments
22 min read
Evaluating Auth0 FGA? Four questions to ask before the Enterprise call

Evaluating Auth0 FGA? Four questions to ask before the Enterprise call

1
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.