ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Use SpiceDB’s relation tuples to delegate project access dynamically. Learn how to model delegatable relations, grant and revoke rights with CLI commands, and understand the trade‑offs of deep delegation chains.
Use Firestore security rules to compare request.auth.uid to resource.data.ownerId, then test locally before deploying.
Structure Confluence space permissions around directory groups, respect the additive access rule, and treat page-level restrictions as a targeted tool—not a default.
Show how to subscribe to SpiceDB's watch stream to keep an in‑process cache of permission decisions, lowering latency while staying eventually consistent.
An architectural analysis of Moodle's enrollment system, exploring how the plugin-based design separates enrollment logic from course context to manage user access at scale.
Path-based authorization in Subversion lets you enforce per-directory read/write rules server-side with an authz file. This note covers the minimal design for svnserve and Apache, trust boundaries, operational checks, failure modes, and when to move beyond static authz.
Guide to choosing Teleport's RBAC source: static local roles vs OIDC/JWT‑derived roles, with a comparison table, trade‑offs, and step‑by‑step OIDC setup.
Confluence page restrictions can only narrow what space permissions already allow. How the two layers interact, a worked configuration, and the places restricted content still leaks.
Stop sharing the Portainer admin account. Here's how to use teams, environments, and least-privilege roles so each team sees and operates only the endpoints it owns — including CI tokens.
firebase
confluence
moodle
teleport
docker