KSKaustav Sarkarinblogs.kaustavsarkar.dev·Sep 1 · 12 min readLayered Authorization: Network to DatabaseThis blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous post covered how Auth Service signs th10
APAbhilash PSinabhilashps.me·Jan 12 · 6 min readAuthorization in Django: From Permissions to Policies — Part 13 (Capstone) — Authorization Is Not SecurityBy this point in the series, authorization should no longer feel like a feature.It should feel like a boundary. — Permissions define who may attempt an action.— Policies define what is valid now.— Invariants define what must never be false. Together,...00
APAbhilash PSinabhilashps.me·Jan 2 · 7 min readAuthorization in Django: From Permissions to Policies : Part 3 — ContentTypes and the Model RegistryOnce we stop treating permissions as rules and start treating them as data, a natural question follows: Data about what? A permission is a label that says, *“*this action applies to that thing.” But how does Django identify that thing—especially in a...00
