Stack Exchange

David Brossard

Chicago, Illinois

http://www.webfarmr.eu

XACMLoïd, API architect, all things security and identity & access management... You can check my code samples on github. I'm also a frequent speaker at meetups, workshops, and security conferences.

I'm also a huge fan of web UI technology and data visualization and would love to dig in more.

top accounts reputation activity subscriptions
Top Questions
Top Answers
72
Defining a Foreign key constraint in H2 Databases
stackoverflow.com

40
Best Practices for securing a REST API / web service
stackoverflow.com

27
Alternatives for Roles/Claims Access Control Systems
stackoverflow.com

26
Spring security Access Control List Billions of rows
stackoverflow.com

22
Resource Based Access Control vs Role Based Access Control
stackoverflow.com

22
How to design role based access control?
softwareengineering.stackexchange.com

20
Role Based Authorization vs. Claim Based Authorization
security.stackexchange.com

20
How to store rights? alternatives to XACML
stackoverflow.com

17
Applying Granular Right restriction in ASP.Net core
stackoverflow.com

16
Looking for approach to implement attribute based access control (ABAC)
security.stackexchange.com

16
Who uses XACML?
stackoverflow.com

15
Start of tomcat failed
stackoverflow.com

14
Is there a ZIP code I can enter when paying-at-the-pump in the USA with a foreign credit card?
travel.stackexchange.com

14
In tomcat, what is catalina_home and why we use it?
stackoverflow.com

12
RBAC/ABAC via XACML policies
stackoverflow.com

12
How to change Spring Security roles by context?
stackoverflow.com

11
using open policy agent (OPA) as an ABAC system
stackoverflow.com

11
XACML Obligations
stackoverflow.com

11
RESTful API authorization on entities/resources?
stackoverflow.com

10
How to get certain JSON values from curl response
stackoverflow.com

10
Is this a good strategy for implementing access control?
stackoverflow.com

9
Is there a JSON profile to define XACML policies?
stackoverflow.com

9
Best practice to check user permission in RESTful API
stackoverflow.com

8
Role-based access control (RBAC) vs. Claims-based access control (CBAC) in ASP.NET MVC
stackoverflow.com

8
LDAP vs SAML Authorization
stackoverflow.com

8
OAuth 2.0 with complex or fine-grained scopes
stackoverflow.com

8
How to prevent users to access other user's data with dotnet core and RESTful APIs?
stackoverflow.com

8
Fine-grained authorization for web applications
stackoverflow.com

8
XACML implementation
stackoverflow.com

7
Authorization checks without littering them in code
softwareengineering.stackexchange.com

1 2