← Graph

Model permissions as a graph, check them as path existence

takeaway 2 connections

Core insight of FGA/ReBAC as presented by Yatish Mehta: rather than evaluating black-box per-permission logic, store relationships as tuples forming a graph and encode permissions as rules about how to traverse it. Asking 'can user U edit task T?' becomes 'is there a path from U to T in the graph under these rules?'. This enables dependency analysis, caching with invalidation, audit paths, and reverse lookups.

type
insight
takeaway Model permissions as a graph, check them as path existence
about
Insight describes how FGA frames permission checks.
takeaway Model permissions as a graph, check them as path existence
from_talk
Core conceptual insight presented in the talk.

Provenance

Read by
2 extractions