permission-impossible-dead-reckoning-pain

Slide Contents for my Programmable Talk for 2025
https://www.programmable.tech/speakers/francis-chung

Permission Impossible - Dead Reckoning Pain

This is a talk about an alternative way of doing Authorizations using Relationship Based Access Control (ReBAC) instead of the traditional Role Based Access Control (RBAC)

I will also briefly introduce Google Zanzibar that was the first global implementation using ReBAC. I will also showcase Topaz as an example of a solution where RBAC, ReBAC and ABAC can be used together in a seamless fashion

Links :

Zanzibar Academy (A good place to start) - https://zanzibar.academy/

Google's White Paper -
https://research.google/pubs/zanzibar-googles-consistent-global-authorization-system/

Topaz -
https://www.youtube.com/watch?v=oW4QRTke-Oc https://www.youtube.com/watch?v=qn6c-XNLdqw

Slides

https://slidechef.net/templates/free-mission-impossible-movie-template/

Github

Topaz - https://github.com/aserto-dev/topaz https://github.com/aserto-demo/api-auth

Demo

Topaz (Console) -
https://console.aserto.com/ui/policies/api-auth/evaluator

Misc Notes - Slides

Black Colour Code : #2d2d2d