Who put ABAC in my RBAC?
Readers know that Attribute-based Access Control (ABAC) is a bit of an obsession with me. It stems from the want to have something like...
Read articleBlog Category
configuration
Browse Symas blog posts filed under configuration.
37 posts
Back to all postsTowards an Attribute-Based Role-Based Access Control System
[Link to the Apache Fortress RBAC-ABAC-SAMPLE project on Github] We’ve all heard the complaint, RBAC doesn’t work. It leads to Role...
Read articleHow I Built an Access Management System Using Apache Directory Fortress
Watching application teams struggle implementing access control systems brings me to a talk I gave at ApacheCon a couple of years ago....
Read articleProgramming in Python using the py-fortress RBAC APIs
Very soon we’ll have a release of py-fortress that works with just the file system. This is to lower complexity of testing and developing...
Read articleTesting the py-fortress RBAC0 System
The Command Line Interpreter (CLI) may be used to drive the RBAC System APIs, to test, verify and understand a particular RBAC policy....
Read articleUsing the py-fortress Command Line Interpreter
The Command Line Interpreter (CLI) drives the admin and review APIs, allowing ad-hoc RBAC setup and interrogation. More info in the...
Read articleIntroducing a pythonic RBAC API
py-fortress is a Python API implementing Role-Based Access Control level 0 – Core. It’s still pretty new so there’s going to be some...
Read articlePreventing Remote Code Execution Exploits in Java
EQUIFAX BREACH Recently there’s been a buzz over the Equifax breach — rightly so. It’s a transformative event and its effects will...
Read articleApacheCon 2017: Symas Teams with Evolveum on Identity Governance Talk at ApacheCon
How to Govern and Maintain Compliance Using Open Source Identity Management Components - Katarina Valalikova, Evolveum & Shawn McKinney,...
Read articleNo case studies on ABAC?
Don’t get me wrong, everyone needs at least RBAC, but it has limitations and doesn’t work well with instance data in the authorization...
Read articleWe Can Stop Looking For That Panacea Now
It seems every year there’s a new protocol for handling security. I was first sucked down into this black hole in the ’90’s. Few...
Read articleApache Fortress SAML Demo
OVERVIEW The aim of this tutorial is to connect Apache Fortress with Spring Security SAML and a common Identity Provider – SSO...
Read article