Artwork

Indhold leveret af David Gardiner and Adelaide .NET User Group / David Gardiner. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af David Gardiner and Adelaide .NET User Group / David Gardiner eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.
Player FM - Podcast-app
Gå offline med appen Player FM !

Managing granular authorisation in .NET, with Ryan Rowston

1:04:36
 
Del
 

Manage episode 400339119 series 1329529
Indhold leveret af David Gardiner and Adelaide .NET User Group / David Gardiner. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af David Gardiner and Adelaide .NET User Group / David Gardiner eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.

We have a challenge: Modern day administrators want to keep a tight rein on who can perform different actions in their systems. Join us and learn how we've evolved our authorisation patterns to grant highly granular permissions to different users, while maintaining developer-friendly patterns in code.

In this talk I'll explain how we've approached this challenge, including:

  • How we've encoded discreet permission levels as bits in a 64-bit integer using a .NET flags enum.
  • How we've used an extended Authorize attribute to allow for developer to add authorisation in one line to API controllers/endpoints.
  • How we've enabled dynamic policy generation to account for the potentially quintillions of unique permission combinations that this enables.

Links:

  continue reading

65 episoder

Artwork
iconDel
 
Manage episode 400339119 series 1329529
Indhold leveret af David Gardiner and Adelaide .NET User Group / David Gardiner. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af David Gardiner and Adelaide .NET User Group / David Gardiner eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.

We have a challenge: Modern day administrators want to keep a tight rein on who can perform different actions in their systems. Join us and learn how we've evolved our authorisation patterns to grant highly granular permissions to different users, while maintaining developer-friendly patterns in code.

In this talk I'll explain how we've approached this challenge, including:

  • How we've encoded discreet permission levels as bits in a 64-bit integer using a .NET flags enum.
  • How we've used an extended Authorize attribute to allow for developer to add authorisation in one line to API controllers/endpoints.
  • How we've enabled dynamic policy generation to account for the potentially quintillions of unique permission combinations that this enables.

Links:

  continue reading

65 episoder

Alle episoder

×
 
Loading …

Velkommen til Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

 

Hurtig referencevejledning