Authorization as a Service (feat. Jake Moshenko)
Software Development, Finance and AI14 Maalis 2024

Authorization as a Service (feat. Jake Moshenko)

Jake Moshenko⁠, CEO of ⁠AuthZed⁠, discusses the importance of permissioning databases and the challenges of implementing permissions at scale. He explains how AuthZed solves this problem by providing a common API for flexible and fine-grained authorization. The target market for AuthZed includes companies of all sizes that need to add complex permission workflows to their applications. Jake demonstrates how AuthZed can be integrated with backend systems, web applications, and mobile apps. He also explains the benefits of using AuthZed, such as increased security and improved product velocity. The conversation concludes with a discussion on the AuthZed schema language and how permissions and roles are defined in the system. Jake Moshenko introduces the concept of permissions and relations in the context of access control. He explains how permissions can be granted to users for specific actions on resources, and how relationships between users and objects are defined. Jake also discusses the flexibility of defining roles and the granularity of permissions. He demonstrates how permissions can be visualized and edited in a user interface, and highlights the benefits of using a startup solution for access control. The conversation concludes with a discussion on the importance of leveraging existing tools and trusting innovative startups.

Takeaways

  • Permissions can be granted to users for specific actions on resources, such as read, write, and admin privileges.
  • Relations define the relationships between users and objects, allowing users to be readers, writers, or admins of a particular object.
  • Roles can be used to group multiple privileges or permissions together, providing a higher level of access.
  • Design time actions involve configuring the access control system, while runtime actions involve making API calls to enforce permissions.
  • When considering building or buying a solution, it is important to focus on core competencies and leverage existing tools and services.

Chapters

00:00 Introduction and Background

01:04 The Problem of Permissions at Scale

05:25 Implementing Authorization for Different Client Types

06:46 Integration with Backend and Web Applications

10:24 Implementing Permissioning for Mobile Apps

14:25 Benefits of Using AuthZed for Permissioning

22:00 Granting Access to Resources with AuthZed API

25:11 Defining Permissions and Roles in AuthZed

30:42 Introduction to Permissions and Relations

31:11 Understanding Permissions and Roles

32:20 Decoupling Relationships and Actions

33:36 Granularity of Permissions

34:14 Grouping Privileges into Roles

36:01 Design Time and Runtime Actions

36:46 Visualizing and Editing Permissions

39:33 Trusting a Startup

53:36 Building vs. Buying Solutions

58:36 The Value of Innovation and Trust

Jaksot(412)

(Part 2/4) Let’s learn the very basics of .NET Development (as a non-.NET developer!)

(Part 2/4) Let’s learn the very basics of .NET Development (as a non-.NET developer!)

(Part 2/4) What is it like to build a .NET App as a non-.NET developer! Let's take a look. #projectmanagement Build your next app on .NET. Plan it on https://snowpal.com.

28 Huhti 20229min

(Part 1/4) Let’s learn the very basics of .NET Development (as a non-.NET developer!)

(Part 1/4) Let’s learn the very basics of .NET Development (as a non-.NET developer!)

(Part 1/4) What is it like to build a .NET App as a non-.NET developer! Let's take a look. #projectmanagement Build your next app on .NET. Plan it on https://snowpal.com.

28 Huhti 20229min

(Part 4/4) My interview experience from the past week

(Part 4/4) My interview experience from the past week

My project ends next week per schedule (one that I thoroughly enjoyed, and another one where I'll surely miss the people), so I've been interviewing the past couple of weeks. While I typically, and predominantly do Technical Videos/Podcasts, I do enjoy these reasonably off-topic videos.   In this series (yeah, no kidding - it took me over 35 minutes to share my thoughts, and I know you are not surprised!), I speak to my recent experience and where I think the interview process is still lacking.   #projectmanagement #interview   Crack your interviews by planning them on https://snowpal.com.

21 Huhti 20226min

(Part 3/4) My interview experience from the past week

(Part 3/4) My interview experience from the past week

My project ends next week per schedule (one that I thoroughly enjoyed, and another one where I'll surely miss the people), so I've been interviewing the past couple of weeks. While I typically, and predominantly do Technical Videos/Podcasts, I do enjoy these reasonably off-topic videos.   In this series (yeah, no kidding - it took me over 35 minutes to share my thoughts, and I know you are not surprised!), I speak to my recent experience and where I think the interview process is still lacking.   #projectmanagement #interview   Crack your interviews by planning them on https://snowpal.com.

21 Huhti 20229min

(Part 2/4) My interview experience from the past week

(Part 2/4) My interview experience from the past week

(Part 2/4) My project ends next week per schedule (one that I thoroughly enjoyed, and another one where I'll surely miss the people), so I've been interviewing the past couple of weeks. While I typically, and predominantly do Technical Videos/Podcasts, I do enjoy these reasonably off-topic videos.   In this series (yeah, no kidding - it took me over 35 minutes to share my thoughts, and I know you are not surprised!), I speak to my recent experience and where I think the interview process is still lacking.   #projectmangement #interview   Crack your interviews by planning them on https://snowpal.com.

21 Huhti 20229min

(Part 1/4) My interview experience from the past week

(Part 1/4) My interview experience from the past week

(Part 1/4) My project ends next week per schedule (one that I thoroughly enjoyed, and another one where I'll surely miss the people), so I've been interviewing the past couple of weeks. While I typically, and predominantly do Technical Videos/Podcasts, I do enjoy these reasonably off-topic videos.   In this series (yeah, no kidding - it took me over 35 minutes to share my thoughts, and I know you are not surprised!), I speak to my recent experience and where I think the interview process is still lacking.   #projectmangement #interview   Crack your interviews by planning them on https://snowpal.com.

21 Huhti 20229min

CoffeeScript to JavaScript:Time to decaffeinate!

CoffeeScript to JavaScript:Time to decaffeinate!

We love CoffeeScript. But, we used to love it a bit more in the past ;-) It's time to move on - to vanilla JavaScript, and to TypeScript. Here's how we are doing it.   #projectmanagement Manage your projects on https://snowpal.com. Keep it simple.

13 Huhti 20229min

AWS API Gateway: An SSL Error, and a fix for it.

AWS API Gateway: An SSL Error, and a fix for it.

Mid 50s, bright and sunny. A brilliant day to share a fix for an SSL-related error I ran it on the AWS API Gateway. If it saves you the 3 hours it took me to get to the bottom of this, it’s 3 more hours for you to enjoy the beautiful day outside ☀️ #projectmanagement Keep things simple. Keep them on https://snowpal.com.

4 Huhti 20225min