Role-Based and Permission-Based Access Control in Spring Security
Introduction Once authentication is solid, the next question is inevitable: what is this user actually allowed to do? Authentication proves who you…
Testing & QA
⚑ Report a ProblemLatest Testing & QA news from Tech News
All topics
agents
ai
api
architecture
automation
backend
beginners
career
claude
cybersecurity
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
testing
tutorial
typescript
webdev
Authorization at the Object Level: Testing for BOLA Before Someone Else Does
Authorization at the Object Level: Testing for BOLA Before Someone Else Does Broken object level authorization is consistently at the top of the OWA…
API Security: The Attack Surface That Grows Without a Firewall
API Security: The Attack Surface That Grows Without a Firewall Every new application feature tends to arrive as an API endpoint. Mobile clients, par…
🚨 10 Authorization Anti-Patterns I Keep Finding in Laravel Apps (And the One-Line Fixes That Save Them)
TL;DR: After reviewing hundreds of Laravel codebases, the same 10 authorization mistakes show up again and again. This article walks through each an…
5 Laravel Authorization Problems You're Probably Facing (And How to Solve Them in 2026)
TL;DR: Most Laravel apps hit the same 5 authorization walls as they grow — role explosion, exception handling, multi-tenancy, contextual permissions…
RBAC and Policy-Based Authorization: Controlling Access by Role and Rule
RBAC and Policy-Based Authorization: Controlling Access by Role and Rule A practical guide to authorization models — Role-Based Access Control (RBAC…
Implement Authorization with Role-Based Access Control (RBAC) in Golang
This is part 2 of our authentication and authorization series. In the previous part, we implemented an authentication system from scratch in Golang…
Supabase Authentication & Authorization Patterns
Supabase Authentication & Authorization Patterns Authentication and authorization are the foundation of secure applications. Supabase provides a…
Introducing Zopa: a 60 KB authorization engine for proxy-wasm, written in Zig
There are plenty of times you want to delegate "let this request through, or block it" to a wasm filter inside Envoy. API gateways, service mesh bou…
Authorization at Scale: Access Levels, Roles, and Compact Decisions
Authentication answers "who are you?" Authorization answers the harder question: "are you allowed to do this?" By the time a request reaches this st…