Authorization - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Auth By Example

Oct 16

Your trash folder can list deleted records the user was never allowed to open

#authorization #security #webdev #backend

1 min read

theauthkid

Oct 16

OAuth Scopes Made Sense to Me. Then I Learned About Cedar Policies.

#cedar #policies #authentication #authorization

5 min read

Auth By Example

Oct 16

An offline sync queue can apply edits after the user lost write access

#authorization #security #saas #offline

1 min read

Auth By Example

Oct 16

Moving a project to another org can leave the old org's API keys working

#authorization #security #api #saas

1 min read

yutianle

Oct 15

Kibana Fleet Authorization Gap: What CVE-2026-102412 Leaks and Who Is Exposed

#kibana #fleetserver #authorization #cve2026102412

2 min read

Auth By Example

Oct 15

A share link should stop working when the person who made it loses access

#backend #authorization #security #webdev

1 min read

Auth By Example

Oct 15

An out-of-office delegate can keep approving after the owner is back

#authorization #security #webdev #backend

1 min read

StarkMan

Oct 15

API Authentication Failures: Checks to Run Before You Blame the Rate Limiter

#apisecurity #authorization #owasp #ratelimiting

2 min read

Auth By Example

Oct 15

How Oso Polar policies map to RBAC, ReBAC and ABAC if you're planning a move

#security #webdev #authorization #rbac

2 min read

Auth By Example

Oct 14

A profile update endpoint can let users change fields they were never allowed to edit

#authorization #security #backend #api

2 min read

Auth By Example

Oct 14

An approve button needs to check that the approver didn't file the request

#authorization #security #backend #webdev

1 min read

Oct 13

API Auth Bugs Are Usually State Bugs

#security #api #authorization #webdev

7 min read

Auth By Example

Oct 13

When an invoice approval check outgrows if user.role == "admin"

#authorization #security #architecture #webdev

2 min read

Auth By Example

Oct 13

A CSV import that matches on ID can overwrite records the importer can't edit

#authorization #security #backend #saas

2 min read

Auth By Example

Oct 13

Sorting by a hidden column can leak the values you hid

#authorization #security #backend #saas

1 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.