Ask HN: Main things to consider when building an app for business/enterprise

Re:Ask HN: Main things to consider when building an app for ... by akajla on Saturday January 07, 2023 @06:12PM (#34294051)

Building and maintaining UIs for RBAC and org management (including self-service, user-facing UIs) isn't trivial. That's why we built it into Warrant. We handle basic authz schemes like RBAC as well as fine-grained authz: https://blog.warrant.dev/introducing-the-self-service-dashbo...

[ Parent | on HN ]

Re:Ask HN: Main things to consider when building an app for ... by mooreds on Saturday January 07, 2023 @06:24PM (#34294146)

That's cool. FusionAuth has a self service function: https://fusionauth.io/docs/v1/tech/account-management/ but it is limited to user profile data, rather than roles and permissions.

How do you prevent a user from assigning themselves roles they shouldn't? Is there some kind of cage preventing escalation?

[ Parent | on HN ]

Re:Ask HN: Main things to consider when building an app for ... by akajla on Saturday January 07, 2023 @08:12PM (#34294946)

The self-service dashboard is scoped only to privileged users (typically account/tenant-specific admins like IT admins) that have a specific permission.

[ Parent | on HN ]

Re:Ask HN: Main things to consider when building an app for ... by sebmellen on Saturday January 07, 2023 @08:13PM (#34294950)

We’ve found one of the biggest issue with RBAC services to be the integrations with our tech stack. Building the RBAC system ourselves helped it be congruent with our stack.

[ Parent | on HN ]