Infuse Business Logic into Permissions with ReBAC
summary
The talk describes replacing scattered RBAC booleans with a centralized relation-based authorization using OpenFGA: domain relations (member, admin, view_payment) are stored as tuples in Postgres and validated with a CLI playground and YAML CI tests. A lightweight facade called rebaka wraps OpenFGA for resilience and monitoring, achieving P90 latency under ~30ms and operating with real data and automated checks in production at Agicap scale.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:24Access management issues
- 10:28Existing model limits
- 15:39Authorization centralization
- 22:00ReBAC and OpenFGA
- 36:10OpenFGA demo
- 39:38Performance and monitoring
- 40:40Q&A
related talks
33mFine-Grained Policies RBAC with OpenFGA- 33mFine-Grained Policies RBAC with OpenFGA
54mFine-Grained Authorization for Modern Applications
25mModernizing Authorization for Cloud Native Applications Using OpenFGA
47mFine Grained Authorisation with Relationship Based Access Control
37mRole-Based Access Is so Yesterday: Revolutionizing Authorization with Open FGA
41mFine Grained Authorisation with Relationship-Based Access Control
25mImplementing Modern Cloud Native Authorization Using OpenFGA