CCanopy IO·2h agoFlat roles first, hierarchy when you need itEvery Canopy Environment starts flat, on a single root node. Adding the hierarchy later is a configuration change rather than a migration.14 min read·canopy-io.hashnode.dev
MMuhammad Ali Mughal·2d agoLaravel RBAC for Multi-Organization PortalsA portal that serves many organizations is not “one app with a role column.” It is a matrix: user × organization × permission, plus the hard rule that a token for Org A must never read Org B’s rows ev8 min read·resume-ai.hashnode.dev
TThyne Ventures·5d agoWhich Snowflake users still log in with a password and no MFA? One read-only query to checkPassword-only Snowflake logins without MFA are one of the easiest account takeovers to prevent — and one of the most common gaps after a few years of hiring. The admin-role check catches the highest-p2 min read·thyneventures.hashnode.dev
TThyne Ventures·6d agoWho has ACCOUNTADMIN in your Snowflake account? One read-only query to checkACCOUNTADMIN can change billing, drop any database and grant itself anything else. Snowflake recommends keeping it to a small number of people, but grants pile up over time. This read-only query lists2 min read·thyneventures.hashnode.dev
PPrateek Singh·Nov 3Least-privilege Azure RBAC for read-only architecture reviewA custom role with */read plus two actions, scoped to one resource group: everything a read-only scanner needs, and nothing it doesn't.9 min read·cloudeval.hashnode.dev
MMete Mertkan·Oct 31Beyond a PoC #1: Your RAG demo works. But is it production-ready ?Explore how to evolve RAG into production-ready AI with modular architecture, configurable retrieval, cross-lingual search, and enterprise security12 min read·metemrtkan.hashnode.dev15KA
RRabin Adhikari·Oct 31Kubernetes RBAC in 2026: Roles, Bindings and Least Privilege That Actually HoldsKubernetes RBAC in 2026: Roles, Bindings and Least Privilege That Actually Holds TL;DR: Kubernetes RBAC fails in practice not because the model is weak but because grants accrete: a wildcard here, a10 min read·devopsenginer.hashnode.dev
MMeghsham Kapure·Oct 18Authentication and AuthorizationFrom wax seals to OAuth: how backends verify who a user is and control what they can do, using sessions, JWTs, API keys, OAuth/OIDC, and RBAC.14 min read·meghsham.hashnode.dev
AAndolasoft Inc·Oct 12Superset RBAC Design for a 500-User Enterprise: Roles, Data Access and Dashboard Permissions Apache Superset Permissions: Smarter Access Control - Apache Superset offers flexible permissions, but default role configurations often lead to excessive privileges and manual dataset access manageme1 min read·andolasoft.hashnode.dev
AAuth By Example·Sep 29Authorization needs fresh attributes, not yesterday's snapshotMost ABAC bugs I see are not bad rules. They are stale inputs. The policy says something like "finance can edit records tagged confidential, but only during business hours." That looks fine in a desig2 min read·authbyexample.hashnode.dev
