Jake Moshenko, CEO of AuthZed, discusses the importance of permissioning databases and the challenges of implementing permissions at scale. He explains how AuthZed solves this problem by providing a common API for flexible and fine-grained authorization. The target market for AuthZed includes companies of all sizes that need to add complex permission workflows to their applications. Jake demonstrates how AuthZed can be integrated with backend systems, web applications, and mobile apps. He also explains the benefits of using AuthZed, such as increased security and improved product velocity. The conversation concludes with a discussion on the AuthZed schema language and how permissions and roles are defined in the system. Jake Moshenko introduces the concept of permissions and relations in the context of access control. He explains how permissions can be granted to users for specific actions on resources, and how relationships between users and objects are defined. Jake also discusses the flexibility of defining roles and the granularity of permissions. He demonstrates how permissions can be visualized and edited in a user interface, and highlights the benefits of using a startup solution for access control. The conversation concludes with a discussion on the importance of leveraging existing tools and trusting innovative startups.
Takeaways
Chapters
00:00 Introduction and Background
01:04 The Problem of Permissions at Scale
05:25 Implementing Authorization for Different Client Types
06:46 Integration with Backend and Web Applications
10:24 Implementing Permissioning for Mobile Apps
14:25 Benefits of Using AuthZed for Permissioning
22:00 Granting Access to Resources with AuthZed API
25:11 Defining Permissions and Roles in AuthZed
30:42 Introduction to Permissions and Relations
31:11 Understanding Permissions and Roles
32:20 Decoupling Relationships and Actions
33:36 Granularity of Permissions
34:14 Grouping Privileges into Roles
36:01 Design Time and Runtime Actions
36:46 Visualizing and Editing Permissions
39:33 Trusting a Startup
53:36 Building vs. Buying Solutions
58:36 The Value of Innovation and Trust
(Part 2/2) Amazon DynamoDB: An Introduction
(Part 1/2) Amazon DynamoDB: An Introduction
API Gateway (Part 12/12): Publishing Snowpal API (RapidAPI: VS Code Extension)
API Gateway (Part 11/12): Publishing Snowpal API (Support for Multiple Environments)
API Gateway (Part 10/12): Publishing Snowpal API (Testing API Endpoints)
API Gateway (Part 9/12): Publishing Snowpal API (OpenAPI, Readme, and more)
API Gateway (Part 8/12): Publishing Snowpal API (API Gateway Summary)
API Gateway (Part 7/12): Publishing Snowpal API (API Documentation)
API Gateway (Part 6/12): Publishing Snowpal API (API Hubs)
API Gateway (Part 5/12): Publishing Snowpal API (API Monetization)
API Gateway (Part 4/12): Publishing Snowpal API (Backward Compatibility of APIs)
API Gateway (Part 3/12): Publishing Snowpal API (Gateway Deployment and Topology)
API Gateway (Part 2/12): Publishing Snowpal API (Postman Workspace, Readme Documentation)
API Gateway (Part 1/12): Publishing Snowpal API (for other businesses to consume)
Thinking about purchasing an UI Template for a quick turnaround? Think again!
Does your SDLC include this very critical step?
API Specification: Do Postman Collections with nested directories carry over seamlessly to OpenAPI?
OAuth 2.0 Implementation to support Apple, Microsoft, Facebook and Google
Cool User Interface vs Stable User Interface: Are they NOT mutually exclusive items?
Transforming REST Endpoints defined in YAML files to Postman Workspace
Join Podbean Ads Marketplace and connect with engaged listeners.
Advertise Today
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast