1,377 questions
Advice
1
vote
0
replies
47
views
How to implement role-based access control in a multi-tenant SaaS application?
I’m working on a multi-tenant SaaS application where different organizations can create and manage business plans and financial forecasts. Each organization has multiple users with different roles (e....
1
vote
1
answer
329
views
View Only Access to Azure Databricks Notebooks
I am trying to give only View access to the Notebooks for a user. I have created a premium Databricks Account from my Azure portal. Then I create a new user in the Azure portal and gave Reader access ...
- 324
0
votes
1
answer
51
views
How do i get number of attributes matched and total attributes checked from XACML policy in ABAC?
I am a beginner in XACML and ABAC. I wrote a policy in XACML, which I deployed in the AuthzForce local server, and it works as expected with my test request in Postman. However, now I want to modify ...
4
votes
1
answer
348
views
Can't get role data in Clerk middleware
I am trying to set up some access control for a project build with NextJs and Clerk.
The plan is to set up the middleware so that I can control which routes they can access based on their role or ...
- 1,589
1
vote
1
answer
203
views
Read ACLs excluding the ownership information in Powershell 7
I need to update permissions with adding, editing, and/or removing access rules from ACLs through Powershell. Normally, you would just do something like
$MyACL = Get-Acl
$MyACL.SetAccessRule($...
- 1,144
0
votes
1
answer
922
views
How to Understand Access Conditions in Mifare Classic 1k
I am working with Mifare Classic 1K, and so far I have successfully inserted/updated data in each block using key A with default access byte FF0780.
I am trying to understand the documentation, but I ...
0
votes
0
answers
52
views
CORS Issue When Deploying Travel Web Application on EC2 and Using Ngrok
We are developing a travel web application and attempting to deploy it on an EC2 instance. We've also tried using ngrok for tunneling, but we're encountering persistent CORS issues between different ...
0
votes
1
answer
495
views
How to Restrict Access to Screens Based on Group Membership in PowerApps?
I'm working on access control within my PowerApps application and need to prevent users who don't belong to a specific Azure AD group (Entra ID) from accessing certain screens.
In the OnStart property ...
- 35
0
votes
1
answer
160
views
Hasura conditional column-based access control
I am using Hasura for the GraphQL API. I have also configured RBAC using Hasura. For example, for the Manager role, I granted access to the following columns in the users table for Read operations: id,...
- 26.1k
0
votes
1
answer
85
views
Azure SQL analysts can create views from forbidden cross database data
TLDR Problem
User can view forbidden data by creating a view to the forbidden data in his own personal schema where he has CONTROL permissions.
Introduction
I have a Azure SQL (Managed Instance) ...
- 77
0
votes
1
answer
134
views
System.Security.AccessControl AccessControlType vs AceType
Is System.Security.AccessControl.AceType is just more detailed version of System.Security.AccessControl.AccessControlType? Is there a way to convert AceType to AccessControlType or these are two ...
- 560
2
votes
2
answers
306
views
Protected and "package-private" visibility when inheriting from class in different package
I'm kind of new to visibility and want to really internilize these concepts.
I've learnt that "package-private", the default visibility in Java, allows us to see fields from classes in the ...
0
votes
1
answer
89
views
Restricting read access to MediaWiki pages based on category and group
I have a page with this content, which is a page intended to be accessible only for users in the "sales" group. Even for reading.
This page contains content for sales.
<!-- Tag for ...
- 190
0
votes
1
answer
197
views
Cannot create a page on mediawiki
When i submit a new page , i always get this error:
Sorry! We could not process your edit due to a loss of session data.
You might have been logged out. Please verify that you're still logged
in and ...
- 190
1
vote
1
answer
370
views
api platform security check performed after custom provider code is already executed
I have encountered very unpleasant API Platform behavior with security with custom providers.
I really need some explanation if this behavior is really intended or is it a security flaw.
During my ...
- 346