Permission Systems that Scale
Permission Systems that Scale
RBAC, ABAC, and Building Your Own Authorization Engine
Kyle Cook
Web Dev Simplified
Table of Contents
Introduction
Welcome
Authentication vs Authorization
Getting Started
Project Overview
Fixing Basic Permissions
Common Permission Mistakes
Fixing Basic Permissions
Clean Architecture: The Services Layer
The Case for Better Architecture
Role-Based Access Control (RBAC)
What is RBAC?
Adding More Permissions
RBAC Limitations
Attribute-Based Access Control (ABAC)
What is ABAC?
Advanced ABAC Features
ABAC Limitations
Permission Libraries
Why Use a Permission Library?
Upgrading to CASL
Conclusion
Choosing the Right Permission Model