Implementing Modern Cloud Native Authorization Using OpenFGA
Talkat AppDeveloperCon Europe 2024 · on Tuesday, 2024-03-19· at 14:05· Pavilion 7 | Level 7.3 | Room S04·
summary
Agicap replaces ad‑hoc is_admin checks with OpenFGA to centralize fine‑grained authorization, using Relationship-Based Access Control models stored in a per‑store model ID, CLI and SDKs, and MySQL/Postgres storage; product managers write readable rules and BDD tests (fga-bdd) that exercise manager‑of‑owner inheritance and a working time‑constrained staff access function for one‑hour support sessions. The team runs checks from APIs, deploys via Helm, reports tests passing, and notes OpenFGA ranks #8 by commits in the CNCF projects.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 2:53Naive authorization problems
- 4:19OpenFGA and relationship-based access control
- 5:22How OpenFGA authorization models work
- 8:33Integrating OpenFGA with apps
- 11:26Modeling complex authorization rules
- 15:42Time-based authorization constraints
- 19:04Benefits of OpenFGA
- 20:30Startup authorization challenges
- 21:53Q&A
related talks
06mProject Lightning Talk: OpenFGA: The Cloud Native Way to Implement Fine Grained Authorization
25mModernizing Authorization for Cloud Native Applications Using OpenFGA
54mFine-Grained Authorization for Modern Applications
37mRole-Based Access Is so Yesterday: Revolutionizing Authorization with Open FGA
33mFine-Grained Policies RBAC with OpenFGA
40mImplementing a Multi-Tenant, Relationship-Based Authorizatio...- 33mFine-Grained Policies RBAC with OpenFGA
57mFine-Grained Authorization: The Missing Piece in Agentic AI Security