Analyze and optimize authorization models for RBAC, ABAC, and ReBAC.
npx skills add https://github.com/hung-phan/system-skills --skill authz
Please help me install this Agent Skill. Skill: authz Source: https://github.com/hung-phan/system-skills/tree/main/skills/system-review/references/security/authz Command: npx skills add https://github.com/hung-phan/system-skills --skill authz
This Skill helps design and implement robust authorization logic, addressing common pitfalls in access control across various systems.
Use the authz skill to analyze your authorization model for potential vulnerabilities and to implement best practices for secure access control.
High-intent search queries and answers about installing and using this skill.
Prevent IDOR and confused-deputy attacks by implementing robust authorization models with centralized Policy Decision Points and Policy Enforcement Points. This secures distributed systems by ensuring consistent policy enforcement and validating access requests against security best practices.
RBAC assigns permissions via roles, ABAC evaluates user and resource attributes, and ReBAC grants access based on relationship graphs. Selecting the appropriate access control model depends on your system architecture and required policy enforcement granularity.
Implement a centralized Policy Decision Point (PDP) to isolate authorization logic from application code, creating a consistent policy enforcement layer across services. This reduces confused-deputy risks and ensures access control models are evaluated uniformly across distributed architectures.
You need relationship-based access control (ReBAC) when authorization depends on complex hierarchical or graph relationships between users and resources. ReBAC is essential for distributed systems requiring fine-grained policy enforcement beyond standard RBAC or ABAC models.
Permission cache poisoning occurs when cached authorization decisions are improperly invalidated or manipulated, allowing unauthorized access. Mitigate this access control vulnerability by implementing secure Policy Enforcement Points and following authorization best practices for distributed systems.
huialiImplement XACML and RBAC policy-based authorization in Rust.
jieni777Automate security audits and compliance assessments across DevSecOps pipelines.
rauell1Configure Vercel AI Gateway routing, failover, and cost controls with OIDC authentication.
MakFlyImplement custom Symfony Voters for granular authorization logic.
