From d863ecb15f7dbe7a8be55ef726f8ac667f5daae1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Stjepan=20Jurekovi=C4=87?= Date: Wed, 10 Sep 2025 11:58:38 +0200 Subject: [PATCH] Added Dynamic Authorization Hi, Stjepan from Manning here. This title might be a good match for your list (although it's a book, not an article or paper). Thank you for considering it. Best, --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 1d0a9c9..eb351ad 100644 --- a/README.md +++ b/README.md @@ -71,6 +71,7 @@ - [Web App Access Control Design](https://owasp.org/www-pdf-archive/ASDC12-Access_Control_Designs_and_Pitfalls.pdf) - A presentation highlighting best practices for implementing access control in web apps. - [What Do Authentication and Authorization Mean in Zero Trust?](https://thenewstack.io/what-do-authentication-and-authorization-mean-in-zero-trust/) - How to think about Authn and Authz within a Zero Trust Architecture. - [Feature Flags and Authorization Abstract the Same Concept](https://ntietz.com/blog/feature-flags-and-authorization/) - A blog post comparing the many similarities and subtle differences between feature flagging and authorization. +- [Dynamic Authorization: Adaptive access control](https://www.manning.com/books/dynamic-authorization) - A book about improving security and standardizing policy enforcement by automating authorization and access control. ## Authz In Practice - [What's the Best Authorization Framework? None At All](https://www.betterment.com/engineering/security-framework) - Opinionated blog post detailing Betterment's approach to authz.