How We Turn Authorization Logic into SQL

Re:How We Turn Authorization Logic into SQL by janto on Wednesday November 24, 2021 @06:42AM (#29329012)

Roles are an approach towards query optimization, but the question placed a constraint on the user not knowing about them. Encoding the role information so it is not visible to the user is a potential solution.

[ Parent | on HN ]

Re:How We Turn Authorization Logic into SQL by winrid on Wednesday November 24, 2021 @02:23PM (#29334032)

By not knowing about them I mean that the customer/company never defines the roles as part of onboarding, etc. In this case they define the restrictions per-user.

[ Parent | on HN ]