Panel Discussion: Authorization
watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/panel-discussion-authorizationsummary
Discussion of GraphQL authorization techniques including RBAC, ABAC, PBAC and data-based checks, with concrete coverage of model-level policies and policy engines (Oso, Hasura) and how they integrate with federated systems and gateways. Focus on pushing authorization into the persistence layer—predicate pushdown, SQL filters, and read-only filters—to avoid N+1 problems and improve scalability and performance when fetching lists and enforcing access control.
AI-written summary · about
related talks
27mAuthorization in the GraphQL era
45mThe Future of Authorization in Applications
23mAuthorization in GraphQL: Peanut Butter and Chocolate
32mImplementing Authorization
25mThe Root of Auth Thingz
21mGraphQL Authorization with Open Policy Agent
29mGraph-Based Authorization: How to Secure Your API With Your Own Graph
06mThe Root of Auth Things