Viewing profile — samjs

Hey James. Thanks for the feedback, and good catch. Looks like that endpoint is pulling from a slightly out of date data source. The docs/dashboard currently are the best resources…

Hey! I'm one of the engineers who built this :) We'll be adding prices to the docs and the model catalog in the dashboard shortly. In short: currently the pricing matches whatever …

I've been building tooling for better debugger support for Rust types using debuginfo: https://github.com/samscott89/rudy I'm planning on doing a proper writeup/release of this soo…

Hey jdenquin, author/Oso cofounder here. I'm obviously biased, but IMO the benefits of using a language over SQL is: * Ability to write reusable logic (rules) * Support for inline …

Hey all! I'm Sam, cofounder + CTO at Oso. Thank you all for the great discussions going on here. If folks are interested in either learning more about the product or working on the…

Hey cratermoon, Oso CTO here. I'm probably too close to it, so I'm not following: "a great many of the problems they are solving exist because of RBAC" Oso supports authorization u…

Ah got it, thanks for sharing! That's definitely context I'm missing from having never used it in an actual application.

> I don't really have much desire to get into maintaining an auth library; there's just not enough time in the day! Haha, well in some ways I'm glad to hear that. That's why we exi…

Biscuits are really cool, one day I plan to try and convince Geoffroy to integrate Polar for policies :) Currently Biscuits + Polar are ideologically similar but with distinct use …

That's a really clean implementation. And the shares are used to resolve authorization here [1], right? Two things that we're solving for at Oso is: making it easier for multiple t…

This sounds really elegant, I love it. Have you seen this deployed in a service-oriented architecture or primarily integrated as part of a single app/db?

(Oso CTO here). Out of curiosity what do you not like about CASL? It always seemed to have a similar goal in mind which I loved, but I suspect it hit similar challenges we had when…

Hey simon! Oso CTO here. Definitely one of my favourite problems too! Some additional context for those who don't think about this all the time: in many cases, the solution is as s…

Quick addition: in practice everyone that I know uses Git + CI/CD for managing + deploying policy changes.

> However: you seem to target developers. Why do you force me to leave my IDE and use your "rules editor"? Can I not write all those things in my IDE, with all the support it bring…

Hey all! Here's a feature I worked on recently at Oso -- it's a little UI for building example policies combining different authorization features. I thought folks here might like …

Please let me know if you do write something. I would love to read it!

Nice! Is the request composer responsible for checking the authorization data? Like what roles/permissions the user has?

Honestly, if your authorization needs are coarse enough that you can (a) handle it as middleware at the controller level, and (b) mostly just rely on roles, then you're probably in…

> I just don't see how "allowed to leave an emoji reaction to an issue inside a repository belonging to an organization" could be anything but application logic. I think it's absol…