Skip to content(if available)orjump to list(if available)

3 comments

·May 22, 2025
Visit

esafak

How do people integrate these authz services with search, with its performance and filtering requirements? It seems like you have to offload search to authz, otherwise you have to deal with pagination-challenging pre- or post-filtering, or incorporate the authz logic into search. You need JOIN semantics, ideally with a context.

hazalmestci

i think the key is having declarative policies that describe what access mean, then choosing whether to enforce inline, pre-filter, or batch filter based on latency/consistency tradeoffs

Sytten

This is an ad