Access Granted with AuthZed
summary
AuthZed explains a deployed Zanzibar-style system (SpiceDB backed by CockroachDB) that replaces app-level if/else spaghetti, answers single permission queries at low latency, and hits tens of billions of checks per day across managed and on‑prem users. It shows when role‑based models break and why relationship-based access control scales better, details costly listing operations are expensive for AI agents, and describes audit logs and per‑request yes/no enforcement.
AI-written summary · about
chapters (9)
- 0:00AuthZed and SpiceDB intro
- 1:50SpiceDB as Zanzibar
- 2:51AuthN vs AuthZ explained
- 3:55Homegrown permission challenges
- 5:42Build vs buy auth systems
- 7:46Centralizing authorization
- 9:34Auth metrics and scale
- 11:20Non-human workloads auth
- 13:49Permission management mistakes
related talks
01h 01mSpiceDB: Flexible Permissions Database for the Internet Era
38mHow Google built a Consistent, Global Authorization System with Zanzibar
25mThe Root of Auth Thingz
40mHow Google Built a Consistent, Global Authorization System with Zanzibar
35mSpiceDB: open source, hyperscale authorization
30mYour AI Has Too Much Access: Authorization for Coding Agents
29mHow Google Built a Consistent, Global Authorization System with Zanzibar
39mSecuring RAG Pipelines with Fine Grained Authorization