News for hackers. Stuff that matters.

A comment on Aserto: Developer API for permissions and RBAC. Parent comment

Re:Aserto: Developer API for permissions and RBAC by gertd on Wednesday February 16, 2022 @03:52PM (#30365521)
So the idea is that you create a candidate set of resource keys from the permission system and join that with the external database and / or use it as a post filter?
[ Parent | on HN ]
Re:Aserto: Developer API for permissions and RBAC by gertd on Wednesday February 16, 2022 @11:54PM (#30369631)
@jzelinskie care to respond, I am really interested in the answer?
[ Parent | on HN ]
Re:Aserto: Developer API for permissions and RBAC by jzelinskie on Thursday February 17, 2022 @11:41AM (#30375137)
You're correct. The only thing I'd add is that post filters can also be done without a candidate set of resources by performing individual permission checks for each potential resource. This is slower, but, as I mentioned, it can actually be perform better than you'd think with some tricks.

Apologies for the delayed response.

[ Parent | on HN ]