Authorization in Software

Auth0
  • 5,0 (1)
  • CÔNG NGHỆ
  • HẰNG TUẦN

Authorization in Software features chats with industry subject matter experts in Authorization. Some of the covered topics are: how authorization is implemented at specific companies (e.g.: Airbnb, Slack, Github), how industry standards relate to authorization, and the history of authorization in software. Damian Schenkelman hosts Authorization in Software. Damian is the creator of the OpenFGA project and a Principal Architect on the Auth0 Lab team, where he does research and development of forward looking products. Before Auth0, Damian spent many years working for and at Microsoft on Azure, and patterns & practices related initiatives. He loves spending his spare time with family, friends and catching up on all things NBA.

  1. 14/12/2023

    Fine Grained Authorization, Open Source and Topaz

    This episode explores the concept of Topaz, an authorization engine that unites policy as code, relationship-based authorization models like Zanzibar, and real-time decision-making. We discuss how Topaz is designed to handle fine-grained authorization, crucial in today's zero-trust environments, by making local decisions over local data. Omri discusses the architecture of Topaz, including its use of Open Policy Agent (OPA) and a triple store model for data. You will gain insight into the challenges of authorization, the importance of keeping data and policies synchronized, and how Topaz addresses these issues. The conversation also touches on the practical aspects of implementing Topaz, such as data source integration, deployment models, and the flexibility it offers for different organizational needs. This episode is essential for anyone interested in the latest trends and tools in software authorization, providing a comprehensive look at how Topaz is paving the way for more secure and efficient application development.

    48 phút

  2. 15/11/2023

    Deep Dive into Open Policy Authorization Layer (OPAL)

    Dive into the world of advanced authorization with Gabriel Manor, Head of DevRel and Growth at Permit.io. In this episode of Authorization in Software, Damian Schenkelman engages Gabriel in a discussion on the Open Policy Authorization Layer, better known as OPAL. Damian and Gabriel delve deep into how OPAL enables a structured and effective approach to authorization. They cover the shift from traditional Role-Based Access Control (RBAC) to the more dynamic Attribute-Based Access Control (ABAC), highlighting the need for granular control in modern application environments. This episode is insightful for those interested in understanding the complexities of policy-based authorization systems. It discusses the challenges and benefits of decoupling authorization policies from application code, emphasizing the importance of streamlined policy management for secure and efficient software development.

    1 giờ 11 phút

  3. 18/10/2023

    How Box Does Authorization

    In this episode of Authorization in Software, Damian Schenkelman sits down with John Huffaker, Distinguished Engineer at Box. They discuss how Box, a major file-sharing and collaboration platform, approaches authorization. The conversation touches upon: The importance of security for a platform like Box which handles sensitive data for countless users and businesses.A look into the different layers of security, including application  and infrastructure security.The challenges and solutions to ensure that Box remains impenetrableA detailed overview of the multiple layers involved in making different kinds of authorization decisions, from viewing files and folders to understanding user permissions and API accesses.And more...Tune in to get an inside look at the ways Box keeps their customers' data remains safe and the authorization mechanisms they employ to achieve this.

    1 giờ 2 phút

  4. 11/09/2023

    Authorization at Workday

    Join Jennifer Wong, a seasoned expert in product management and application security at Workday, as she takes us through a decade-long journey at the forefront of one of the world's leading financial and human capital management software companies. Dive into the complexities of platform solutions and the significance of reusable components, as Jennifer outlines how Workday achieves seamless interoperability, ensuring reduced time-to-value for their customers. Learn how authorization is crucial in a company that is trusted with sensitive data from global corporate giants, and how they maintain its revered industry-standard security, even as it grows through acquisitions. Learn about the nuances of their authorization capabilities, how they adapt to evolving threats, and the underlying principle of Zero Trust. If you're curious about how Workday handles user roles, permissions, and where authorization decisions are made, this episode is a must-listen.

    28 phút

  5. 08/08/2023

    Macaroons for Authorization with Neil Madden

    In this episode, host Damian Schenkelman and cybersecurity expert Neil Madden deep dive into the world of macaroons for authorization. Neil starts by distinguishing between JSON Web Tokens (JWT) and macaroons, and shares the origins and unique properties of the latter. They discuss how these Google-invented tokens can enhance security by enabling the addition of conditions, or "caveats", to the token even after it's been issued. The discussion also includes the difference between first-party and third-party caveats, key considerations for implementing macaroons, and how they can be integrated into existing systems like OAuth.

    52 phút

  6. 15/06/2023

    Real Time Authorization with Atul Tulshibagwale

    Join us in this episode of Authorization in Software, where we're joined by Atul Tulshibagwale, CTO of SGNL. In an enlightening conversation with our host Damian Schenkelman, Atul dives deep into the concept of Real-Time Authorization, an innovative approach to dynamic access control. This episode sheds light on how Real-Time Authorization operates, continuously assessing and authorizing access based on a variety of dynamically determined factors rather than preassigned privileges. In this ideal scenario, access to resources is granted only when necessary, enhancing security and limiting potential vulnerabilities.

    49 phút

  7. 11/05/2023

    The Cedar Language and Policy Based Authorization with Emina Torlak

    In this episode of Authorization in Software, host Damian Schenkelman talks to Emina Torlak, Senior Principal Applied Scientist at AWS, about the intricacies of software authorization, policies, and the Cedar policy language. Torlak delves into the philosophy behind Cedar, an open-source language for writing and enforcing custom authorization policies. They discuss the need for policy-based access control, how it separates application code from authorization logic, and the importance of user interface in managing authorization.

    46 phút

  8. 15/03/2022

    Role Management at Slack

    Jake Byman (Engineer @ CommonRoom), Aish Raj Dahal (Staff Engineer @ Slack) and Damian Schenkelman (Principal Engineer @ Auth0) talk about Role Management at Slack: how authorization at Slack works and how it is implemented. Like this episode? Be sure to leave a five-star review and share Authorization in Software with your network! You can connect with Damian on Twitter at @dschenkelman, or reach the Auth0 team focused on Fine Grained Authorization at @auth0lab.

    1 giờ 13 phút
Xem tất cả (15)

Giới Thiệu

Authorization in Software features chats with industry subject matter experts in Authorization. Some of the covered topics are: how authorization is implemented at specific companies (e.g.: Airbnb, Slack, Github), how industry standards relate to authorization, and the history of authorization in software. Damian Schenkelman hosts Authorization in Software. Damian is the creator of the OpenFGA project and a Principal Architect on the Auth0 Lab team, where he does research and development of forward looking products. Before Auth0, Damian spent many years working for and at Microsoft on Azure, and patterns & practices related initiatives. He loves spending his spare time with family, friends and catching up on all things NBA.

Thông Tin

  • Nhà sáng tạo
    Auth0
  • Năm hoạt động
    2021 - 2023
  • Tập
    15
  • Xếp hạng
    Sạch
  • Trang web chương trình
    Authorization in Software