使用Player FM应用程序离线!
Managing granular authorisation in .NET, with Ryan Rowston
Manage episode 400339119 series 1329529
We have a challenge: Modern day administrators want to keep a tight rein on who can perform different actions in their systems. Join us and learn how we've evolved our authorisation patterns to grant highly granular permissions to different users, while maintaining developer-friendly patterns in code.
In this talk I'll explain how we've approached this challenge, including:
- How we've encoded discreet permission levels as bits in a 64-bit integer using a .NET flags enum.
- How we've used an extended Authorize attribute to allow for developer to add authorisation in one line to API controllers/endpoints.
- How we've enabled dynamic policy generation to account for the potentially quintillions of unique permission combinations that this enables.
Links:
73集单集
Manage episode 400339119 series 1329529
We have a challenge: Modern day administrators want to keep a tight rein on who can perform different actions in their systems. Join us and learn how we've evolved our authorisation patterns to grant highly granular permissions to different users, while maintaining developer-friendly patterns in code.
In this talk I'll explain how we've approached this challenge, including:
- How we've encoded discreet permission levels as bits in a 64-bit integer using a .NET flags enum.
- How we've used an extended Authorize attribute to allow for developer to add authorisation in one line to API controllers/endpoints.
- How we've enabled dynamic policy generation to account for the potentially quintillions of unique permission combinations that this enables.
Links:
73集单集
所有剧集
×欢迎使用Player FM
Player FM正在网上搜索高质量的播客,以便您现在享受。它是最好的播客应用程序,适用于安卓、iPhone和网络。注册以跨设备同步订阅。