Posts with keyword: pbac

3 entries

Why Do Policy Languages Feel So Hard?

Tue Apr 15 11:41:00 2025

Policy languages can feel intimidating due to unfamiliar syntax, poor tooling, and the high stakes of getting access control wrong. But once understood, they simplify application logic and make security more reliable and maintainable.
Continue reading {Why Do Policy Languages Feel So Hard?}

Minimal vs Fully Qualified Access Requests

Tue Apr 4 09:29:00 2023

By creating fully qualified authorization contexts from minimal requests, a policy information point reduces the burden on developers building or integrating policy enforcement points, allows for more flexible and reusable policies, and enriches authorization contexts to allow more precise access decisions.
Continue reading {Minimal vs Fully Qualified Access Requests}

Not all PBAC is ABAC: Access Management Patterns

Wed Mar 15 14:41:00 2023

Exploring the architectural patterns we can use with policy-based access control (PBAC) illustrates the difference between policy-based and attribute-based access control (ABAC).
Continue reading {Not all PBAC is ABAC: Access Management Patterns}