authorization
Joshua Morris (opens on the publisher’s site)
joshuamorris.info
-
BobDaHacker reports a simple tl;dv authorization failure exposing meeting metadata for tens of thousands of users, then months without a meaningful vendor response—security culture is what happens after the report lands.
Joshua P. Steele (opens on the publisher’s site)
joshuapsteele.com
Why this topic matches
- declared “Authorization” via Article tag Source page (opens on the publisher’s site)
- declared “Authorization” via Article tag Source page (opens on the publisher’s site)
- declared “Authorization” via Article tag Source page (opens on the publisher’s site)
- declared “authorization” via Topic directory Source page (opens on the publisher’s site)
-
I've spent thousands on my Logos library and pay for its AI features. Claude is far better. The fix is an MCP server, and Logos's licensing objection is really a solvable authorization problem.
-
Am I still a priest? I left the ACNA in 2023. Just received my Letters Dimissory. But I still can’t decide if ordination conferred something real and permanent, or if it was only ever a jurisdictional authorization. What say you? https://joshuapsteele.com/am-i-still-a-priest/
-
Real-World Authorization Lessons with OpenFGA? I’d Love to Hear Them (opens on the publisher’s site)
Are you using OpenFGA or a Zanzibar-inspired authorization system in production? I'd love to hear how you're managing models and authorization data at scale.
-
Notes from building a centralized, fine-grained authorization prototype—weighing OpenFGA, Topaz, and Permify against role- and attribute-based access control.
-
A call for software developers to share authorization patterns, tools, pitfalls, and resources across RBAC, ABAC, ReBAC, and beyond.
