Fine-Grained Authorization for Modern Applications
summary
Claim: centralizing authorization with a Zanzibar-style relationship graph reduces code duplication and speeds auditing. Implementation: OpenFGA (open source) stores user→object relations, exposes a check API that receives user, relation, object and returns allow/deny. Demo uses FGA Playground to show Kate inheriting viewer access via folder→parent→document. Ops details: OpenFGA runs on Postgres/MySQL/SQLite, the managed offering uses DynamoDB. Result: fine-grained ReBAC queries evaluate quickly and the demo decision trees work as expected.
AI-written summary · about
chapters (13)
- 0:00Fine-grained authorization intro
- 2:57Travel anecdote context
- 5:47Why auth is critical
- 9:20Business impacts of auth failures
- 14:36Traditional auth challenges
- 16:43Evolution of access control
- 25:36Relationship-based access control
- 29:07OpenFGA implementation
- 33:21Steps to use OpenFGA in your applications
- 39:13OpenFGA Playground demo
- 46:29Learning resources
- 50:43Is OpenFGA right for you?
- 53:53Q&A
related talks
37mRole-Based Access Is so Yesterday: Revolutionizing Authorization with Open FGA
33mFine-Grained Policies RBAC with OpenFGA
06mProject Lightning Talk: OpenFGA: The Cloud Native Way to Implement Fine Grained Authorization- 33mFine-Grained Policies RBAC with OpenFGA
25mImplementing Modern Cloud Native Authorization Using OpenFGA
55mYour AI Agents Are Overprivileged: The Case for Fine-Grained Authorization
46mInfuse Business Logic into Permissions with ReBAC
30mFine-Grained Authorization: The Missing Piece in Agentic AI Security