News for hackers. Stuff that matters.

A comment on Aserto: Developer API for permissions and RBAC. Parent comment

Re:Aserto: Developer API for permissions and RBAC by rad_gruchalski on Wednesday February 16, 2022 @02:15PM (#30364405)
If you are using Postgres (or YugabyteDB) then you can use row level security for that.
[ Parent | on HN ]
Re:Aserto: Developer API for permissions and RBAC by ogazitt on Wednesday February 16, 2022 @02:38PM (#30364671)
Authorization is really about "defense in depth". In a ZTA model, your access proxy, authentication system, API gateway, application middleware, and data layer all provide additional levels of protection [0].

Using your DB's row-level security for data filtering is definitely complementary to API authorization.

[0] https://www.aserto.com/blog/modern-authorization-requires-de...

[ Parent | on HN ]
Re:Aserto: Developer API for permissions and RBAC by rad_gruchalski on Wednesday February 16, 2022 @02:44PM (#30364737)
Yup, and I'd use Keycloak with a PostgreSQL extension to drive both together. I'd drive RLS from Keycloak if I was going to go that way.
[ Parent | on HN ]