Integrate Mark Authorization with airSlate SignNow

Integrate mark authorization

okay hello good morning that's that's the spirit yeah come on good morning oh thank you sir so welcome my name is Dominic that's Brock and for those who don't know us or for those who know us we kind of have luxury and not everybody agrees on the word luxury of doing you know security stuff full-time like every day you know and since security is such a broad field we kind of specialize on authentication prime you know what is these days called identity and access control they are which is basically building authentication architectures and you know single sign-on and and these things so and it turns out when you do that like every single day it's important it gets really easy yes because you kind of seen almost everything and it's very you know it becomes easy to map the architecture to the right you know like cookbook style solution right but once you're done with authentication then inevitably you will hit the problem of okay so now I know who the user is but what is he allowed to do in my application right and that turns out it's much much harder then then just figuring out who the user is so for many many years yeah our standard answer was yeah you know that it's very application specific and you know identity server which is the open source project we're working on kind of it's like a like a turnkey style solution already for most of indication scenarios so people were asking us I can you do the same thing for authorization you know just do episode use authorization and I'm done and it turns out that it's not that easy right the first observation is anytime somebody asked me that question I said okay so how does authorization work at your company right and then you know you ask 10 people you get 15 arms after that and it turns out you know everybody does it a little bit differently and and that there's a really blurry line between what is authorization and what is business logic and what are business rules and what is security related and what is just you know the way your company works and we identified a couple of common approaches you know like something like Rose for example you know like I'm a I'm a doctor I'm allowed to do this yeah permissions right so Brock is allowed to stand on a wobbly stage for example yeah some people use apples you know inspired by how Windows works you know that you attach you have objects in a database for example and you attach to who is allowed to do what to the object there which has its own own issues right or inheritance and orphans and these things communities versus commands right so commands are basically I I do something am I allowed to do that there vs. communities you you get some data but you...