Authorization as a Service (feat. Jake Moshenko)
Software Development, Finance and AI14 Maalis 2024

Authorization as a Service (feat. Jake Moshenko)

Jake Moshenko⁠, CEO of ⁠AuthZed⁠, discusses the importance of permissioning databases and the challenges of implementing permissions at scale. He explains how AuthZed solves this problem by providing a common API for flexible and fine-grained authorization. The target market for AuthZed includes companies of all sizes that need to add complex permission workflows to their applications. Jake demonstrates how AuthZed can be integrated with backend systems, web applications, and mobile apps. He also explains the benefits of using AuthZed, such as increased security and improved product velocity. The conversation concludes with a discussion on the AuthZed schema language and how permissions and roles are defined in the system. Jake Moshenko introduces the concept of permissions and relations in the context of access control. He explains how permissions can be granted to users for specific actions on resources, and how relationships between users and objects are defined. Jake also discusses the flexibility of defining roles and the granularity of permissions. He demonstrates how permissions can be visualized and edited in a user interface, and highlights the benefits of using a startup solution for access control. The conversation concludes with a discussion on the importance of leveraging existing tools and trusting innovative startups.

Takeaways

  • Permissions can be granted to users for specific actions on resources, such as read, write, and admin privileges.
  • Relations define the relationships between users and objects, allowing users to be readers, writers, or admins of a particular object.
  • Roles can be used to group multiple privileges or permissions together, providing a higher level of access.
  • Design time actions involve configuring the access control system, while runtime actions involve making API calls to enforce permissions.
  • When considering building or buying a solution, it is important to focus on core competencies and leverage existing tools and services.

Chapters

00:00 Introduction and Background

01:04 The Problem of Permissions at Scale

05:25 Implementing Authorization for Different Client Types

06:46 Integration with Backend and Web Applications

10:24 Implementing Permissioning for Mobile Apps

14:25 Benefits of Using AuthZed for Permissioning

22:00 Granting Access to Resources with AuthZed API

25:11 Defining Permissions and Roles in AuthZed

30:42 Introduction to Permissions and Relations

31:11 Understanding Permissions and Roles

32:20 Decoupling Relationships and Actions

33:36 Granularity of Permissions

34:14 Grouping Privileges into Roles

36:01 Design Time and Runtime Actions

36:46 Visualizing and Editing Permissions

39:33 Trusting a Startup

53:36 Building vs. Buying Solutions

58:36 The Value of Innovation and Trust

Jaksot(412)

Custom Attribution API: Build forms really quick

Custom Attribution API: Build forms really quick

One of the recent APIs we released is the Custom Attribution API, and the Postman Collection for it can be found on custom-attribution-api.snowpal.com. #snowpal

14 Marras 20232min

If you are not enjoying what you are doing, is it worth doing it at all?

If you are not enjoying what you are doing, is it worth doing it at all?

This particular podcast is less about technology and more about enjoying what you are doing. Do you love what you do? #snowpal #apidevelopment Subscribe to our APIs on aws.snowpal.com.

14 Marras 20238min

Rome was not built in a day. Nor will your next feature be.

Rome was not built in a day. Nor will your next feature be.

Too often, I see developers look a little flustered when they embark on a journey to build something new. Some of the questions/comments that repeatedly pop up: "There's a lot to do". "Will I be able to do it?". "Is the deadline reasonable?" Let's talk about this a bit, and see how we should approach this. #snowpal Hone your skills on learn.snowpal.com.

14 Marras 20239min

(Part 2/2) AWS Summit, DC: My thoughts (on workshops, sessions, etc).

(Part 2/2) AWS Summit, DC: My thoughts (on workshops, sessions, etc).

(Part 2/2) I attended the AWS Summit in DC last week, and here are some of my thoughts. #snowpal #projectmanagement #apidevelopment #softwaredevelopment  Integrate Snowpal APIs. Subscribe on AWS Marketplace. Get help from Snowpal Professional Services. Learn. Succeed. Grow. Hone your skills on Snowpal Education. Manage personal and professional projects on Snowpal. Download from App Store and/or Play Store.

12 Kesä 20235min

(Part 1/2) AWS Summit, DC: My thoughts (on workshops, sessions, etc).

(Part 1/2) AWS Summit, DC: My thoughts (on workshops, sessions, etc).

(Part 1/2) I attended the AWS Summit in DC last week, and here are some of my thoughts. #snowpal #projectmanagement #apidevelopment #softwaredevelopment Integrate Snowpal APIs. Subscribe on AWS Marketplace. Get help from Snowpal Professional Services. Learn. Succeed. Grow. Hone your skills on Snowpal Education. Manage personal and professional projects on Snowpal. Download from App Store and/or Play Store.

12 Kesä 20239min

PowerSync: Have a need to keep your data in sync with on-device databases?

PowerSync: Have a need to keep your data in sync with on-device databases?

PowerSync is a Cloud Service that helps keep your data in synch with your Web/Mobile clients -- as long as you use a SQL Database, and perhaps Flutter as a framework (not sure if they support other frameworks). ----more----I have not used this yet but it certainly piqued my interest so I met with their team recently, and here are my initial thoughts. For more information, check out https://www.powersync.co. ----more---- #snowpal #projectmanagement #apidevelopment #softwaredevelopment Integrate Snowpal APIs. Subscribe on AWS Marketplace. Get help from Snowpal Professional Services. Learn. Succeed. Grow. Hone your skills on Snowpal Education. Manage personal and professional projects on Snowpal. Download from App Store and/or Play Store.

15 Maalis 202316min

Importance of Design Decisions in Software Development: It can hardly ever be overstated.

Importance of Design Decisions in Software Development: It can hardly ever be overstated.

While all design decisions are important, some tend to have a longstanding effect compared to others. And it isn't always easy to tell which ones those are. So, how should you address those? #snowpal #projectmanagement #apidevelopment #softwaredevelopment Integrate Snowpal APIs. Subscribe on AWS Marketplace. Get help from Snowpal Professional Services. Learn. Succeed. Grow. Hone your skills on Snowpal Education. Manage personal and professional projects on Snowpal. Download from App Store and/or Play Store.

7 Maalis 20237min

Testing API on Postman: Some of the features Postman offers (and should you use them?)

Testing API on Postman: Some of the features Postman offers (and should you use them?)

Do your development and/or testing teams have an interest in testing APIs on Postman? If so, how do they go about it? #snowpal #projectmanagement #developer #api Integrate with Snowpal. Subscribe to Snowpal API. Manage personal and professional projects on https://snowpal.com

7 Maalis 20236min