What EU AI Act Article 12 and ISO 42001 mean for AI agent logs
Article 12 of the EU AI Act says high-risk AI systems must technically allow automatic recording of events (logs) over the lifetime of the system. I…
Architecture
⚑ Сообщить о проблемеПоследние новости Architecture от Tech News
Все темы
agents
ai
api
architecture
automation
aws
backend
beginners
career
database
devchallenge
devops
javascript
llm
machinelearning
mcp
news
opensource
performance
productivity
programming
python
react
security
showdev
softwareengineering
systemdesign
tutorial
typescript
webdev
Role-Based and Permission-Based Access Control in Spring Security
Introduction Once authentication is solid, the next question is inevitable: what is this user actually allowed to do? Authentication proves who you…
Authorization at the Object Level: Testing for BOLA Before Someone Else Does
Authorization at the Object Level: Testing for BOLA Before Someone Else Does Broken object level authorization is consistently at the top of the OWA…
API Security: The Attack Surface That Grows Without a Firewall
API Security: The Attack Surface That Grows Without a Firewall Every new application feature tends to arrive as an API endpoint. Mobile clients, par…
The Life of a Permission Check: Following One Request Through 14 Layers of Authorization
TL;DR: What actually happens when a user clicks "Delete" in your Laravel app? Most developers think it's a single boolean check. In reality, a moder…
5 Laravel Authorization Problems You're Probably Facing (And How to Solve Them in 2026)
TL;DR: Most Laravel apps hit the same 5 authorization walls as they grow — role explosion, exception handling, multi-tenancy, contextual permissions…
RBAC and Policy-Based Authorization: Controlling Access by Role and Rule
RBAC and Policy-Based Authorization: Controlling Access by Role and Rule A practical guide to authorization models — Role-Based Access Control (RBAC…
SaaS Security Best Practices: Auth, Authorization, and Data Protection
Security is not a feature — it is a property of your entire architecture. This guide covers the security practices implemented in production SaaS ap…
Implement Authorization with Role-Based Access Control (RBAC) in Golang
This is part 2 of our authentication and authorization series. In the previous part, we implemented an authentication system from scratch in Golang…
A Deactivated Admin Could Still Use Their Token. That's When Dual-Mode JWT Stopped Being About Speed.
What building cross-service RBAC taught me about the difference between a fast check and a correct one VaultPay is a wallet microservice I built on…
Introducing Zopa: a 60 KB authorization engine for proxy-wasm, written in Zig
There are plenty of times you want to delegate "let this request through, or block it" to a wasm filter inside Envoy. API gateways, service mesh bou…