Unified permission management between API and client

on YouTube ↗39m

" summary

Marion describes a unified permissions system for API Platform and a Vue.js client that uses multiple criteria to manage user rights. The implementation enforces API security (resource access control, automatic filters) and mirrors those permissions in the client UI and functionality, including transparent hot-reload when permissions change.

AI-written summary · about

" chapters (5)

1. 0:00Introduction
2. 5:38Securing API with Symfony
3. 16:29Client-side permissions
4. 29:31Real-time updates with Mercure
5. 32:00Conclusion

" related talks

• 10mUser-centric API Access control using UMAMark Dobrinic · Platform Summit 2014
• 14mBuilding Permissions into Data ModelingLingtian Cheng · PEPR '24
• 38mShield your backend from outside attacks with API ManagersBárbara Teruggi · Voxxed Days Thessaloniki 2024
• 54mAuthorization for modern ApplicationsDominick Baier · NDC Oslo 2018
• 56mImplementing authorization in web applications and APIsDominick Baier, Brock Allen · NDC Oslo 2017
• 32mFlexible way to adopt UX/UI in an Angular app according to the user’s permissionsDaniel Ostrovsky · AngularUP Experience 2020
• 58mImplementing authorization in web applications and APIsBrock Allen · NDC Minnesota 2018
• 58mImplementing Authorization in Web Applications and APIsDominick Baier, Brock Allen · NDC London 2018