I've been evaluating OpenFGA for relationship-based access control (ReBAC) and I believe I've identified a significant limitation: *OpenFGA does not support multi-level indirect relationship evaluation beyond one level of indirection*.## Example Scenario: Management Chain AuthorizationImagine a scenario where permissions should propagate up a management chain:1. *Object A* is *owned* by *User...
I'm a software engineer with 3 years of experience, about help a fellow SE with 7 YOE do some technical interviews to find an SE with ~3-5 YOE.Neither of us enjoy interviewing and, like most other SEs, we think that the "standard" tech/dev interview process–with its focus on whiteboard-style coding challenges–is a poor predictor of who will make a good SE on the job.We'd like to find a...
As a software engineer and voracious reader (ahem, or at least buyer) of books, I'm trying to follow Gergely Orosz's advice in [The Software Engineer's Guidebook](https://www.engguidebook.com/) to get a good reference book for the main languages I work in.For Java (90% of my daily work), I just ordered [Java: The Complete Reference, 13th...
Anyone else out there facing issues when it comes to katharsis/crnk and Spring Boot?
Take a look at PR here for attempt to get crnk to support Spring Boot 3 and use jakarta imports.
I'm working on a firewall for our SCIM server. Our SCIM clients are various identity providers (Azure Active Directory, Okta, etc.). We've created IP allow lists based on the lists of IP addresses published by these identity providers, but the lists can and do change.If we want to stick with an allow list-focused approach, what's the best way to keep our IP lists up to date? Are there...
TL;DR: Have you built a SCIM server/API? If so, did you do so from scratch, or did you use a tool/library? Which would you recommend? Anything a new-ish dev should know while building a SCIM server?I'm trying to build a SCIM (https://www.simplecloud.info/) server to handle user provisioning from various Identity Providers (IdPs; Azure AD, Okta, Workday, etc.) into our application.I've...