The engineering notebook
RSS feed#authorization
Articles, practical guides, and engineering notes on authorization.
By Ashish Bhakhand 108 published articles
Explore the articles
2 articles
Reset filtersBuilding Admin APIs with Organization-Scoped RBAC
Design administrative endpoints around explicit permissions, tenant scope, audit trails, and safe response models.
Multi-Tenant Authorization Requires More Than Checking a JWT
Authentication proves identity. Safe multi-tenant APIs must also scope every resource query and action to the caller's organization.