Access Control

6 guides tagged “Access Control”.

  1. How to Give an Agent Staging Access Without Production Separate account, separate credentials, separate network, and synthetic data. Staging access should be one hop away from production, not one flag. DevOps intermediate 5 min
  2. How to Review an Agent's Tool Permissions Inventory the tools, map each to a task, remove what nothing needs, and test the boundary with a request the agent should refuse. Information Security intermediate 5 min
  3. What Is Least Privilege for AI Agents? An agent should hold the narrowest credential and tool set its current task needs, for the shortest time, with every use attributable. Information Security beginner 5 min
  4. What Is the Confused Deputy Problem in AI Agents? The agent has permission the content does not. Untrusted text tells it to act, and it acts with its own authority on the attacker's behalf. Information Security intermediate 5 min
  5. Authentication and Authorization for AI Builders: Who You Are, and What You're Allowed to Touch Login, sessions, JWTs, OAuth, passkeys, and the object-level checks your AI assistant skips. Every auth concept a vibecoder needs, with a linked guide for each. Information Security beginner 12 min
  6. How to Design Authorization for Your App (So Users Can't Reach Each Other's Data) Ownership, roles, tenants, and admin access — how to design authorization that lives in the query, denies by default, and survives the endpoint someone forgets to protect. Information Security intermediate 12 min