Authorization as a Service (feat. Jake Moshenko)
Software Development, Finance and AI14 Maalis 2024

Authorization as a Service (feat. Jake Moshenko)

Jake Moshenko⁠, CEO of ⁠AuthZed⁠, discusses the importance of permissioning databases and the challenges of implementing permissions at scale. He explains how AuthZed solves this problem by providing a common API for flexible and fine-grained authorization. The target market for AuthZed includes companies of all sizes that need to add complex permission workflows to their applications. Jake demonstrates how AuthZed can be integrated with backend systems, web applications, and mobile apps. He also explains the benefits of using AuthZed, such as increased security and improved product velocity. The conversation concludes with a discussion on the AuthZed schema language and how permissions and roles are defined in the system. Jake Moshenko introduces the concept of permissions and relations in the context of access control. He explains how permissions can be granted to users for specific actions on resources, and how relationships between users and objects are defined. Jake also discusses the flexibility of defining roles and the granularity of permissions. He demonstrates how permissions can be visualized and edited in a user interface, and highlights the benefits of using a startup solution for access control. The conversation concludes with a discussion on the importance of leveraging existing tools and trusting innovative startups.

Takeaways

  • Permissions can be granted to users for specific actions on resources, such as read, write, and admin privileges.
  • Relations define the relationships between users and objects, allowing users to be readers, writers, or admins of a particular object.
  • Roles can be used to group multiple privileges or permissions together, providing a higher level of access.
  • Design time actions involve configuring the access control system, while runtime actions involve making API calls to enforce permissions.
  • When considering building or buying a solution, it is important to focus on core competencies and leverage existing tools and services.

Chapters

00:00 Introduction and Background

01:04 The Problem of Permissions at Scale

05:25 Implementing Authorization for Different Client Types

06:46 Integration with Backend and Web Applications

10:24 Implementing Permissioning for Mobile Apps

14:25 Benefits of Using AuthZed for Permissioning

22:00 Granting Access to Resources with AuthZed API

25:11 Defining Permissions and Roles in AuthZed

30:42 Introduction to Permissions and Relations

31:11 Understanding Permissions and Roles

32:20 Decoupling Relationships and Actions

33:36 Granularity of Permissions

34:14 Grouping Privileges into Roles

36:01 Design Time and Runtime Actions

36:46 Visualizing and Editing Permissions

39:33 Trusting a Startup

53:36 Building vs. Buying Solutions

58:36 The Value of Innovation and Trust

Jaksot(410)

Attention to Details is always important but more so when you are doing UI/UX work

Attention to Details is always important but more so when you are doing UI/UX work

## Attention to Detail We all recognize the fact the pixel pushing is time consuming, and if you are a smallish team trying to move mountains, it could be a bit of a pain as it consumes a lot of time.  But, one thing is for certain. You are going to save time (and a lot of it) if you did it right the first time around rather than add TODOs in the code to revisit them later.  We've made a number of UI/UX enhancements to our Web Platform, and we hope to deploy them this weekend. Check them out on https://snowpal.com! Managing projects should be quick, simple and fun. Not complex, boring or overwhelming!

9 Huhti 20211min

How much should the past drive the future?

How much should the past drive the future?

One school of thought is if you've done a certain way a certain way in the past and it worked, there's no good reason to change it. Another school of thought is that one should always question how we may have approached a certain problem in the past and continually look for ways to improve it. While I don't know if one is better than the other, I know where I stand! Manage your projects on https://snowpal.com!

7 Huhti 20211min

Integrated Development Environments (or IDEs): How important are they?

Integrated Development Environments (or IDEs): How important are they?

IDEs play a huge role in not just our productivity as developers but also our happiness levels (given the amount of time we literally spend using them). What can I say about them in under 100 seconds that you may not already know? :)   Manage your projects on https://snowpal.com.

6 Huhti 20211min

(Tech Lightyear Series) Software Development in under 100 seconds

(Tech Lightyear Series) Software Development in under 100 seconds

Of the many pieces of (constructive) feedback I've received over the years (in both personal & professional life), one that has been a common occurrence is "Can you be more succinct?". And while I've always tried to do that (and also want to believe I've made some good strides in that aspect), I realize I've ways to go. So, here is another attempt (read: challenge) at getting closer to that finish line. I'll be doing a series that I've ambitiously named Tech Lightyear (as in, how much can we learn if we traveled at the speed of light!). And the requirement I've set myself is: no more than 90-100 seconds, tops. Whatever I want to say, that's how long I get. And we shall see how goes!   Manage your projects on https://snowpal.com.

5 Huhti 20211min

Code Commenting: Mandatory or Optional?

Code Commenting: Mandatory or Optional?

We all agree (I think!) that code commenting is essential. But, how much of it do we need, and how do we go about it? And why it is stack agnostic.   Manage your projects on https://snowpal.com.

4 Huhti 20214min

Firebase Messaging - Sending push notifications on a Flutter App

Firebase Messaging - Sending push notifications on a Flutter App

Setting up push notifications on a mobile app takes a bit of time the first time, and then onwards, you shouldn't have to do much. Ideally.   Manage your projects on https://snowpal.com.

31 Maalis 20217min

(Feat. Special Guest!) Pros & Cons of Technology Choices (Part 3/3)

(Feat. Special Guest!) Pros & Cons of Technology Choices (Part 3/3)

(Part 3/3) When you are building a new app, you are bound to assess a variety of options available to you. Some of these choices are going to stick around with you for a while so it is imperative to make the right choices (with the information available at that point).   Manage your projects on https://snowpal.com.

28 Maalis 20217min

(Feat. Special Guest!) Pros & Cons of Technology Choices (Part 2/3)

(Feat. Special Guest!) Pros & Cons of Technology Choices (Part 2/3)

(Part 2/3) When you are building a new app, you are bound to assess a variety of options available to you. Some of these choices are going to stick around with you for a while so it is imperative to make the right choices (with the information available at that point).   Manage your projects on https://snowpal.com.

26 Maalis 20219min