Daniel Bass

Google Zanzibar is the authorization system that handles permission checks for Drive, YouTube, Calendar, and other Google services. Learn how Zanzibar works, its tuple-based data model, and how open-source implementations like OpenFGA, SpiceDB, and Permit bring Zanzibar-style authorization to your own applications.

Learn best practices for managing user roles and access delegation and how to implement a cascading authorization model to enhance your app's access control.

Learn how to quickly create and implement custom user experiences for your application with User Attributes and Feature Flags

Learn how to use JWT for authorization, understand the basics of what JWT is, and explore examples of proper JWT usage in authentication and authorization.

Learn how to build cloud-native authorization systems with CI/CD, thorough testing, and precise modeling and implementation.

10 topics, 45 questions: Authorization is part of every app—here are the questions you NEED to ask yourself before you implement this critical security feature

Policy languages and frameworks like OPA, Cedar, and OpenFGA are rising in popularity. Explore the solutions they provide, and the benefits of using them.

OPA just announced its newest version, 1.0. How does it affect you? What does it mean? What's new? Find out here -

Learn how to implement fine-grained RBAC, ABAC, and ReBAC authorization in a Next.js application using a working demo of a mobile plan management application

Scale is a challenge that every developer encounters at some point - how did Reddit approach this challenge, and what can we learn from it?

If you've worked on authorization before, you know that sometimes standard policy models just aren't enough. What can we do then? Let's find out -

Discover best practices for authorization in REST API. Learn about API authorization layers, actors, tools like Permit.io and OPAL.