Authorization as a Service (feat. Jake Moshenko)

Authorization as a Service (feat. Jake Moshenko)

Jake Moshenko⁠, CEO of ⁠AuthZed⁠, discusses the importance of permissioning databases and the challenges of implementing permissions at scale. He explains how AuthZed solves this problem by providing a common API for flexible and fine-grained authorization. The target market for AuthZed includes companies of all sizes that need to add complex permission workflows to their applications. Jake demonstrates how AuthZed can be integrated with backend systems, web applications, and mobile apps. He also explains the benefits of using AuthZed, such as increased security and improved product velocity. The conversation concludes with a discussion on the AuthZed schema language and how permissions and roles are defined in the system. Jake Moshenko introduces the concept of permissions and relations in the context of access control. He explains how permissions can be granted to users for specific actions on resources, and how relationships between users and objects are defined. Jake also discusses the flexibility of defining roles and the granularity of permissions. He demonstrates how permissions can be visualized and edited in a user interface, and highlights the benefits of using a startup solution for access control. The conversation concludes with a discussion on the importance of leveraging existing tools and trusting innovative startups.

Takeaways

  • Permissions can be granted to users for specific actions on resources, such as read, write, and admin privileges.
  • Relations define the relationships between users and objects, allowing users to be readers, writers, or admins of a particular object.
  • Roles can be used to group multiple privileges or permissions together, providing a higher level of access.
  • Design time actions involve configuring the access control system, while runtime actions involve making API calls to enforce permissions.
  • When considering building or buying a solution, it is important to focus on core competencies and leverage existing tools and services.

Chapters

00:00 Introduction and Background

01:04 The Problem of Permissions at Scale

05:25 Implementing Authorization for Different Client Types

06:46 Integration with Backend and Web Applications

10:24 Implementing Permissioning for Mobile Apps

14:25 Benefits of Using AuthZed for Permissioning

22:00 Granting Access to Resources with AuthZed API

25:11 Defining Permissions and Roles in AuthZed

30:42 Introduction to Permissions and Relations

31:11 Understanding Permissions and Roles

32:20 Decoupling Relationships and Actions

33:36 Granularity of Permissions

34:14 Grouping Privileges into Roles

36:01 Design Time and Runtime Actions

36:46 Visualizing and Editing Permissions

39:33 Trusting a Startup

53:36 Building vs. Buying Solutions

58:36 The Value of Innovation and Trust

Episoder(412)

(Part 2/2) Podcast Collaboration: Introducing my first 2 guests

(Part 2/2) Podcast Collaboration: Introducing my first 2 guests

(Part 2) 2 podcast collaborations in - time to share a few thoughts! My first podcast was with ⁠Matthew Davidchuk⁠, a brilliant engineer. And no surprises - 90 minutes later, I walked out a slightly better engineer. My second podcast was with ⁠Magali Pelissier⁠, a brilliant product leader. And no surprises again - 120 minutes later, I walked out a slightly better product manager. (The podcasts are in "post production", so should be published shortly) Look out for more podcasts with Matthew and Magali, as the first podcast has turned into a series! Plus, my next guest is a very special one from New Delhi, and we will be discussing a 3rd topic (hint: there may well be a hands-on, LIVE coding component to that conversation). #snowpal #podcast

30 Nov 20234min

(Part 1/2) Podcast Collaboration: Introducing my first 2 guests

(Part 1/2) Podcast Collaboration: Introducing my first 2 guests

(Part 1) 2 podcast collaborations in - time to share a few thoughts! My first podcast was with ⁠Matthew Davidchuk⁠, a brilliant engineer. And no surprises - 90 minutes later, I walked out a slightly better engineer. My second podcast was with ⁠Magali Pelissier⁠, a brilliant product leader. And no surprises again - 120 minutes later, I walked out a slightly better product manager. (The podcasts are in "post production", so should be published shortly) Look out for more podcasts with Matthew and Magali, as the first podcast has turned into a series! Plus, my next guest is a very special one from New Delhi, and we will be discussing a 3rd topic (hint: there may well be a hands-on, LIVE coding component to that conversation). #snowpal #podcast

30 Nov 20235min

Porting over 250 podcasts from one platform to another

Porting over 250 podcasts from one platform to another

Scalability isn't limited to applications in production. No matter what you do, you want to ensure that it is a scalable approach. Short of it, the exact same activity is going to take a lot longer. Besides, what's interesting is that making even tiny changes to your approach tends to go a long way in enhancing overall productivity. In this podcast, I'll share the approach we took to port hundreds of videos from one platform to another, and why we were able to accomplish that in shy of 10 hours. #snowpal aws.snowpal.com learn.snowpal.com

26 Nov 202312min

Do you love what you do? Do you feel fulfilled at work?

Do you love what you do? Do you feel fulfilled at work?

And are you doing more of it? Here's my take on a Venn Diagram you've most likely seen that illustrates the implications of our career choices beautifully. #snowpal aws.snowpal.com learn.snowpal.com

24 Nov 20236min

ETA: What does your team base their estimates on? And how accurate are they?

ETA: What does your team base their estimates on? And how accurate are they?

It is one thing to provide an ETA for any given task, but it is completely another to provide a meaningful, reasonably accurate, and accountable ETA. Ask for ETAs but take them with a grain of salt. Focus more on solving the problem efficiently and less on the actual time it will take to solve that. #projectmanagement Manage your projects on https://snowpal.com. Keep it simple.

24 Nov 20238min

Waterfall vs Scrum vs Kanban vs Agile

Waterfall vs Scrum vs Kanban vs Agile

If you want to learn the theoretical differences between these terms, you are better off checking it out on the web. Just do a search and you'll find a lot of hits. But, if you want to get a sense of the more practical differences, and how you should apply it in the context of your specific project, then you may want to give this podcast a listen. #projectmanagement Manage your projects on https://snowpal.com. Keep it simple.

24 Nov 202313min

Adding Scoped Bookmarks on Snowpal Pitch using the Relations Feature!

Adding Scoped Bookmarks on Snowpal Pitch using the Relations Feature!

Pitch has always supported a Linking feature that allows you to structure your content any which way you want (aka, create content once, use it any number of times). Relations is a new feature that is another feather on the cap, and it works beautifully whether you use it with Linking, or simply by itself. #snowpal aws.snowpal.com learn.snowpal.com

24 Nov 20235min

Building a Mobile App - Part I (Starting to build a native mobile app, and wondering which way to go?)

Building a Mobile App - Part I (Starting to build a native mobile app, and wondering which way to go?)

If you are starting to build a native mobile app and are a little unsure of how to proceed, this podcast (the first in this series) might offer you some guidance. #snowpal aws.snowpal.com learn.snowpal.com

24 Nov 20233min

Populært innen Teknologi

romkapsel
rss-avskiltet
smart-forklart
lydartikler-fra-aftenposten
teknisk-sett
energi-og-klima
rss-impressions-2
teknologi-og-mennesker
nasjonal-sikkerhetsmyndighet-nsm
shifter
tomprat-med-gunnar-tjomlid
rss-alt-vi-kan
hans-petter-og-co
fornybaren
elektropodden
kunstig-intelligens-med-morten-goodwin
rss-heis
rss-alt-som-gar-pa-strom
i-loopen
rss-polypod