The Root of Auth Things
summary
Argues that authorization is enforceable at the schema level by annotating with SDL directives and extracting permission checks into a centralized context service, showing how Federation fragments checks across subgraphs and why a single context payload is needed. Demonstrates using relationship models (GBAC/RBAC/ABAC/ReBAC) and a graph representation to capture ownership/editor/viewer rules, proposing an authorization graph that propagates context across subgraphs so checks remain consistent and enforceable.
AI-written summary · about
chapters (7)
- 0:00Start
- 0:37Enforcement @ SDL
- 2:50GBAC Graph Based Access control
- 3:30RBAC: order/level role checks ABAC: capability/attribute checks
- 3:49PBAC: context rich recipes ReBAC: relationship to resources
- 4:35Federated Data Graph
- 5:06Authorization isn't easy Context is Decoupling permission checks • Promising road ahead
related talks
25mThe Root of Auth Thingz
54mFine-Grained Authorization for Modern Applications
29mAuthz as a dev workflow
45mThe Future of Authorization in Applications
55mYour AI Agents Are Overprivileged: The Case for Fine-Grained Authorization
57mFine-Grained Authorization: The Missing Piece in Agentic AI Security
41mFine Grained Authorisation with Relationship-Based Access Control
29mWhy Authorization is Hard