Maria Lowas-Rzechonek
I’ve graduated from philosophy and social science. True to Zed A. Shaw advice from Learn Python the Hard Way, I entered the tech world as an anthropologist with barely enough of the local language to get around and survive. My next step led me to the Django Girls community - first as an attendee, then as a couch, committer and organizer. At 2016, I was a speaker at DjangoCon Europe. Currently, I’m working as a Python developer at Talixo.
In my free time, I’m involved in the extreme sports of mountain hiking with kids and dancing flamenco.
Session
Managing complex authorization logic can be a nightmare. Without a framework to help you,
it can soon end up in a mess of if-else statements and partial solutions that will only
give you a headache.
One day, I found myself in that exact situation. I decided to tackle the problem, and
that's how I came across the concept of "policy-based authorization" or ABAC. While
there are available libraries for this, I found them of little help for a large, legacy
codebase that is monolithic at its core.
In my talk, I will share my experience in thinking about this problem and how to use
ABAC to implement a custom solution that fits your needs. I will outline the main
components of my solution and show how it can be applied to Django views and
FastAPI endpoints.