Articles about authorization, and other news from Oso's engineering team
Oso's Developer Den interview with Jason Warner (VC at Redpoint Ventures, formerly CTO of GitHub and Head of Engineering at Heroku) on his path to computers, the trickiest technical problems, and programming as a superpower.
We run internal hackathons at Oso as a way to experiment with new ideas, prototype wish list features, build some off-the-wall things and have fun. In the past, we've prototyped features like data filtering in Python and built games like Polar Adventure. For the first time, in our most recent hackathon earlier this month we opened up the hackathon to the Oso community members, and they took the 🎂.
Oso's Developer Den series with Josh Ma (former CTO of Benchling and founder of Airplane) on hiring, SaaS businesses, and technical tools.
We sat down to speak with Harley Lang, who’s been working on Intraverbal, a new content creation platform for educators and students. Intraverbal has a novel way of constructing lessons, and both students and teachers use the platform. Harley had been hand-rolling his authorization code, and when it started to get unmanageable, he reached for Oso to simplify his authorization design. Intraverbal is an exciting project, and we at Oso were very interested to see the role the Oso library played in the app!
Oso's Developer Den series with Charity Majors (Co-Founder/CTO of Honeycomb) on reluctantly writing a database, Honeycomb's strategy for hiring, and why you should deploy immediately after writing code.
Intro to rules in Polar, Oso's policy language, and how they work together to define authorization.
Learn about what a declarative language is, and why using a declarative language is better for authorization.
Our next "Tea with Sam" will cover a hot topic: Zanzibar, Google's consistent, global authorization system. Watch Oso Cofounder/CTO, Sam Scott, implement Zanzibar in <60 minutes live on Twitch.
Developer Den is a series of interviews with notable developers in our community to learn more about their journey into engineering. We sat down with Calvin French-Owen, co-founder of Segment, a market-leading customer data platform.
We’ll demonstrate a few ways of modeling role-based access control in Python and SQLAlchemy. The first few examples will be in plain SQLAlchemy, with no other libraries. For more complex examples we’ll show off using Oso for managing role authorization schemes
Oso cofounder/CTO Sam Scott was a guest on the Junior to Senior Podcast, hosted by David Guttman (organizer of js.la).
We're continuing our "Tea with Sam" series with Oso cofounder/CTO, Sam Scott, live on Twitch. Next up we'll be taking another behind-the-scenes look into Oso development with a sneak preview of some new roles building blocks we're adding to the SQLAlchemy integration.
We're announcing our Series A to help deliver the first batteries-included library for building authorization in your application. With this round of funding we're doubling down on putting security in the hands of developers, expanding our team, and celebrating the release of Authorization Academy, a free course to educate developers on building application authorization.
Demo: A Principled Approach to Authorization using Python & SQLAlchemy
Oso cofounder/CTO Sam Scott led a talk at the recent Austin Python meetup on authorization patterns for GraphQL using Oso and the Python Graphene library.
Tea with Sam: Data Filtering in Oso using Partial Evaluation
Oso cofounder/CTO Sam Scott led a talk at on authorization patterns in Node.js applications, and fast and secure ways to implement them in a sample B2B SaaS application.
We are kicking off the first "Tea with Sam," a Twitch session with oso cofounder/CTO Sam Scott. We'll be sharing a behind the scenes look into oso development and some of the latest features that the engineering team is working on. Our first session will dig into the Go Library, which is under active development.
We explore the capabilities of oso's authorization policy language Polar using numerous challenges from this years of advent of code.
RBAC and ABAC are terms that security teams commonly throw around when discussing authorization and permissions systems. When building access control in an app, the common misunderstanding is that it's an "either/or" — that it's a decision between RBAC or ABAC — when in fact most applications want for both access control models. In this post, learn about RBAC and ABAC and how combine both models in practice.
The third and final installment of our series on building a runtime reflection system in Rust looks at how we can dynamically call Rust methods at runtime.
Learn how to add Role-Based Access Control (RBAC) with SQLAlchemy, using a GitHub clone example app.
Use oso's policy engine to build an authorization solution that integrates directly with GraphQL, using Graphene, SQLAlchemy, & Flask.
Our Cofounder/CTO Sam Scott led a talk on common access control patterns in Python/Django and how to implement them into a sample B2B SaaS application.
oso engineer, Alex Plotnick, led a talk on Polar, oso's declarative policy language