Contributor Never Build Permissions Again: OPAL with Or Weis
Feb 15, 2024
Or Weis, co-creator of OPAL and co-founder of Permit, discusses revolutionizing authorization for developers. He dives into the benefits of OPAL's open-source model and its integration with policy engines like OPA. The conversation covers strategic approaches to decoupling permissions from code, illuminating the latest trends in authorization systems like ABAC and ReBAC. Or also shares insights from his lighthearted podcast, Command Shift Left, emphasizing the importance of community engagement in the tech world.
AI Snips
Chapters
Transcript
Episode notes
OPAL Enables Scalable Policy Management
- Policy engines need external policy and dynamic data to make decisions.
- OPAL manages and propagates this data to scale many policy engines efficiently.
Or Weis's Authorization Journey
- Or Weis shares his extensive engineering background and experience with building access control repeatedly.
- His frustrations led to co-founding Permit to solve authorization challenges once and for all.
Best Practices for Authorization
- Decouple authorization policy from application code to reduce complexity and frequent rewrites.
- Use dedicated microservices for authorization and keep policy up to date at the edge.