Skip to main content

Questions tagged [rbac]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
596 views

RBAC - using database vs hard coded

I need to implement RBAC in a project I'm working on, and I'm fairly new to the concept. I am trying to figure out the best way to implement it. The most common approach seems to be to create roles ...
user3353167's user avatar
1 vote
2 answers
146 views

RBAC and domain specific roles

I have some doubts about RBAC which I cannot wrap my head around. So I would like to hear what you guys think. Though I understand the concept of RBAC, I cannot figure out how to apply that to my ...
ShahiM's user avatar
  • 13
0 votes
0 answers
37 views

Attempting to Implement RBAC from ACL

I am trying to implement RBAC to a system but I endup creating an ACL instead due to my low understanding of this archtecture. What I already have implemented: Created User model. Created Groups with ...
Elias Prado's user avatar
0 votes
0 answers
195 views

How do you do you implement roles on your API's using Azure AD Security groups?

I'm trying to figure out the best way to accomplish using Azure Active Directory Security groups to manage role assignments for an API. I'm trying to evaluate a few different options as well as poll ...
Luke Gaskell's user avatar
0 votes
1 answer
163 views

OWASP Broken Access Control by example: preventing user's from reading/writing data that isn't theirs

I have experience building RBAC-based authorization mechanisms, and understand the theory behind ACLs (DAC?) though I've never had the need to implement them. A situation was just presented to me that ...
hotmeatballsoup's user avatar
0 votes
1 answer
140 views

How to limit resource creation with RBAC permission?

The project I am working on is a SaaS application with multiple payment tiers. Each one has multiple limits for different actions. One example would be that a free user can only create 1 space, a ...
Forrest Keller's user avatar
2 votes
3 answers
1k views

Securing API for third party use

We have a set of microservices and would like to expose endpoints from a subset of these for third parties to use. To this end, we will build an API Gateway that acts as the access control mechanism ...
Umair's user avatar
  • 185
0 votes
0 answers
919 views

Single users database for many apps

I'm designing a database that holds the information for users of three diferentes apps that share the access to the data trough an API. For every user i'm storing credentials, profile and roles. What ...
Francisco Hanna's user avatar
5 votes
1 answer
6k views

Dealing with permissions for the list of resource

I have a few big services, that uses the same database and tables for managing roles and permissions. Each service ask the database directly for the permissions. Now I need to build a new service. ...
alex's user avatar
  • 183