[sqlalchemy] Early access to roles in sqlalchemy-oso – authorization as a spec

[Stephie Glaser]

Hi all! We build Oso, a library for building authorization into your
application ( <https://docs.osohq.com/>https://docs.osohq.com/). We've
previously shared our base Python library and sqlalchemy-oso integration.
Specifically, the post on Implementing Role-Based Access Control (RBAC) in
SQLAlchemy with Oso.

We are working on a new version of the library that treats authorization
more like a spec (starting with sqlalchemy-oso). It provides building
blocks for common patterns like roles, hierarchies, etc. From there, you
can customize it as needed using Oso's underlying policy language.

We're providing early access to the library for those who are interested in
providing feedback. Email step...@osohq.com if interested.

*Some useful links:*


   - sqlalchemy-oso library
   <https://docs.osohq.com/python/reference/frameworks/sqlalchemy.html>
   - Built-in roles with SQLAlchemy
   
<https://docs.osohq.com/python/reference/frameworks/sqlalchemy/sqlalchemy_roles_ref.html>
   - Implementing RBAC in sqlalchemy-oso
   <https://www.osohq.com/post/introducing-builtin-roles>
   - Join us on Slack for any questions <http://join-slack.osohq.com >

Stephie Glaser
Developer Relations, Oso <https://www.osohq.com/>

-- 
SQLAlchemy - 
The Python SQL Toolkit and Object Relational Mapper

http://www.sqlalchemy.org/

To post example code, please provide an MCVE: Minimal, Complete, and Verifiable 
Example.  See  http://stackoverflow.com/help/mcve for a full description.
--- 
You received this message because you are subscribed to the Google Groups 
"sqlalchemy" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to sqlalchemy+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/sqlalchemy/CAN7K40tgP1FhkYiKYtFNttqMXLBY2OVFvLZL5i25iXNJbSKO-w%40mail.gmail.com.

[sqlalchemy] Demo: Authorization Using Python & SQLAlchemy

[Stephie Glaser]

Authorization is an unstructured problem. Writing code to decide who can do 
what in your app can cover a broad set of cases. The most structure that 
typically gets applied to this problem area is a set of if statements and 
roles, but in reality, there are a lot more patterns and structure that we 
can apply. 

Oso is an open source system for building authorization into applications. 
It's a bit like SQLAlchemy in that it provides a structured approached to 
authorization, much like SQLAlchemy does for data modeling and access. Oso 
cofounder/CTO, Sam Scott,  gave a talk providing a mental model for 
authorization and showing how to apply it using Oso, Python and SQLAlchemy 
- watch the recording here. 


-- 
SQLAlchemy - 
The Python SQL Toolkit and Object Relational Mapper

http://www.sqlalchemy.org/

To post example code, please provide an MCVE: Minimal, Complete, and Verifiable 
Example.  See  http://stackoverflow.com/help/mcve for a full description.
--- 
You received this message because you are subscribed to the Google Groups 
"sqlalchemy" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to sqlalchemy+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/sqlalchemy/fefaa8ee-80d0-498f-b2a7-a2fb78264938n%40googlegroups.com.

Re: [sqlalchemy] Implementing Role-Based Access Control (RBAC) in SQLAlchemy with oso

[Stephie Glaser]

Hey Michael, thanks for flagging that. It's now been fixed! I'm providing
both links for you below.
Please feel free to reach out once you've dug in and we'll be happy to
answer any questions! You can join us on slack
<https://join-slack.osohq.com/> as well, either way!

blog post: https://www.osohq.com/post/introducing-builtin-roles
Guide to roles patterns:
 https://docs.osohq.com/getting-started/rbac.html#resource-specific-roles
<https://docs.osohq.com/getting-started/rbac.html#resource-specific-roles>

On Thu, Jan 7, 2021 at 12:21 PM 'Michael Mulqueen' via sqlalchemy <
sqlalchemy@googlegroups.com> wrote:

> Thanks for sharing this. Will take a good look at it, I've been looking
> for something like this.
>
> There's a broken link on the text "guide to roles patterns
> <https://docs.osohq.com/getting-started/rbac.html#resource-specific-roles>
> ".
>
> On Thu, 7 Jan 2021, 18:15 Stephie Glaser,  wrote:
>
>> Hi all, we've been working towards building Role-Based Access Control
>> (RBAC) features into our libraries at oso. We had released a preview of
>> those features in our sqlalchemy-oso package, and since then have polished
>> those features up, written some docs, and are excited to share a sample app
>> showcasing our new out-of-the box roles features!
>>
>> Link to Introducing Built-in Roles with oso.
>> <https://www.osohq.com/post/introducing-builtin-roles> It covers how to
>> structure Role-Based Access Control (RBAC) and how we ship roles
>> out-of-the-box for SQLAlchemy. Plus feature designs, broader thinking on
>> roles, and the sample app we use to validate and showcase the
>> sqlalchemy-oso library.
>>
>>
>>
>>
>>
>> --
>> SQLAlchemy -
>> The Python SQL Toolkit and Object Relational Mapper
>>
>> http://www.sqlalchemy.org/
>>
>> To post example code, please provide an MCVE: Minimal, Complete, and
>> Verifiable Example. See http://stackoverflow.com/help/mcve for a full
>> description.
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "sqlalchemy" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to sqlalchemy+unsubscr...@googlegroups.com.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/sqlalchemy/50f0c039-9fdb-42cb-b40e-a17f8c70c282n%40googlegroups.com
>> <https://groups.google.com/d/msgid/sqlalchemy/50f0c039-9fdb-42cb-b40e-a17f8c70c282n%40googlegroups.com?utm_medium=email_source=footer>
>> .
>>
> --
> SQLAlchemy -
> The Python SQL Toolkit and Object Relational Mapper
>
> http://www.sqlalchemy.org/
>
> To post example code, please provide an MCVE: Minimal, Complete, and
> Verifiable Example. See http://stackoverflow.com/help/mcve for a full
> description.
> ---
> You received this message because you are subscribed to a topic in the
> Google Groups "sqlalchemy" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/sqlalchemy/AajLjUJQC5A/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> sqlalchemy+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/sqlalchemy/CAHxMHYWWekkQ7TWbUPfznYupgi5LczjB-yWNKKTBL4X1M0bJYg%40mail.gmail.com
> <https://groups.google.com/d/msgid/sqlalchemy/CAHxMHYWWekkQ7TWbUPfznYupgi5LczjB-yWNKKTBL4X1M0bJYg%40mail.gmail.com?utm_medium=email_source=footer>
> .
>

-- 
SQLAlchemy - 
The Python SQL Toolkit and Object Relational Mapper

http://www.sqlalchemy.org/

To post example code, please provide an MCVE: Minimal, Complete, and Verifiable 
Example.  See  http://stackoverflow.com/help/mcve for a full description.
--- 
You received this message because you are subscribed to the Google Groups 
"sqlalchemy" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to sqlalchemy+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/sqlalchemy/CAN7K40vZ5CwnFguNLP12SNWP-YTu8uqkRDU7doHHwenRU1SxQQ%40mail.gmail.com.

[sqlalchemy] Implementing Role-Based Access Control (RBAC) in SQLAlchemy with oso

[Stephie Glaser]

Hi all, we've been working towards building Role-Based Access Control 
(RBAC) features into our libraries at oso. We had released a preview of 
those features in our sqlalchemy-oso package, and since then have polished 
those features up, written some docs, and are excited to share a sample app 
showcasing our new out-of-the box roles features!

Link to Introducing Built-in Roles with oso. 
 It covers how to 
structure Role-Based Access Control (RBAC) and how we ship roles 
out-of-the-box for SQLAlchemy. Plus feature designs, broader thinking on 
roles, and the sample app we use to validate and showcase the 
sqlalchemy-oso library. 





-- 
SQLAlchemy - 
The Python SQL Toolkit and Object Relational Mapper

http://www.sqlalchemy.org/

To post example code, please provide an MCVE: Minimal, Complete, and Verifiable 
Example.  See  http://stackoverflow.com/help/mcve for a full description.
--- 
You received this message because you are subscribed to the Google Groups 
"sqlalchemy" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to sqlalchemy+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/sqlalchemy/50f0c039-9fdb-42cb-b40e-a17f8c70c282n%40googlegroups.com.