Modernizing Authorization: From Basic Roles to Decoupled ABAC
Explore the evolution of authorization systems in this conference talk from Conf42 DevSecOps 2023. Dive into the journey from basic role-based access control to advanced attribute-based access control (ABAC) as companies scale and face new challenges. Learn about the distinctions between authentication and authorization, and follow a hypothetical company's growth through six stages of increasing complexity in access management. Discover a new approach to authorization, including the concept of authorization-as-a-service and the transition from code-based to policy-based systems. Examine the rise of sidecar patterns in microservices architectures and their impact on authorization. Gain insights into practical implementation, advantages, and challenges of modern authorization systems. Conclude with an introduction to Cerbos, an open-source authorization solution.