Resources

Authorization Resource Center

Master authorization fundamentals with our guides, events, and more.

Featured Events

O’Reilly SuperStream: Retrieval-Augmented Generation in Production

O'Reilly Superstream dives into Retrieval-Augmented Generation.

Fine-Grained Authorization in Python

Homegrown authorization code works fine, until it doesn't. Oso's developer experience engineers show why this happens, and how you can refactor your app using Oso.

Google-Scale Authorization with Zanzibar

Lessons from Google's approach to authz.

10 Types of Authorization Explained

Understanding the key models of access control.

Featured Content

Blog

Best Practices for Authorization in Microservices

Patterns for scalable authorization.

Docs

Local Authorization: A Guide

How to manage authorization data locally.

Blog

Authorization for the Rest of Us

Demystifying Zanzibar-style access control.

Docs

Modeling Authorization Logic in Polar

A deep dive into policy design.

Sample Apps

Sample App

Google Drive-Style File Sharing

Build a secure file-sharing system.

Sample App

Fine-Grained Access Control in EMRs

Secure patient data in electronic medical records.

Sample App

The Hidden Complexity of CRM Authorization

Managing permissions in customer management.

Sample App

List Filtering with Authorization

Control access to data in Rails apps.

Let's see some code.