---
title: "Discussion on \"Authorization needs fresh attributes, not yesterday's snapshot\" | Hashnode"
description: "Discussion on \"Authorization needs fresh attributes, not yesterday's snapshot\". Most ABAC bugs I see are not bad rules. They are stale inputs.\nThe policy says something like \"finance can edit records tagged confidential, but only during business hours.\" That looks fine in a desig"
url: "https://hashnode.com/posts/authorization-needs-fresh-attributes-not-yesterday-s-snapshot/6abb57b87eb0e171af506376"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Authorization needs fresh attributes, not yesterday's snapshot](https://authbyexample.hashnode.dev/authorization-needs-fresh-attributes-not-yesterday-s-snapshot?utm_source=hashnode&utm_medium=feed)

Most ABAC bugs I see are not bad rules. They are stale inputs. The policy says something like "finance can edit records tagged confidential, but only during business hours." That looks fine in a desig

Sep 29 · 2 min read · authbyexample.hashnode.dev  
Read the article

-   [#authorization](https://hashnode.com/tag/authorization)
-   [#security](https://hashnode.com/tag/security)
-   [#backend](https://hashnode.com/tag/backend)
-   [#rbac](https://hashnode.com/tag/rbac)
-   [#abac](https://hashnode.com/tag/abac)

## Written by

[Auth By Example](https://hashnode.com/@authbyexample)

@authbyexample

  
[View profile](https://hashnode.com/@authbyexample)

Practical lessons on auth, authorization, and access control.

Practical lessons on auth, authorization, and access control.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.