8 dépôts
Granular permission management for invoking database-resident functions.
Explore 8 awesome GitHub repositories matching security & cryptography · Function Access Controls. Refine with filters or upvote what's useful.
This project provides an integrated backend platform built around a relational database. It automatically generates REST and GraphQL APIs from database schemas, allowing for direct data interaction through standard requests and client libraries. The platform includes a comprehensive authentication system that manages user identity, session handling, and fine-grained access control through database-native row-level security policies. Beyond core data management, the platform offers specialized services for object storage, vector data processing for semantic search, and real-time communication
Enforces granular execution permissions for database functions using standard role-based access control commands.
graphql-engine is an automated GraphQL API engine that transforms database tables and relationships into a queryable GraphQL schema. It functions as a federation gateway and mapper, instantly generating APIs with built-in filtering, pagination, and mutations from existing databases and remote schemas. The project distinguishes itself through a fine-grained access control layer that enforces row-level and field-level permissions. It further provides a real-time data subscription server that converts standard queries into live streams and a system for triggering event-driven webhooks and notifi
Manages which user roles are permitted to execute specific tracked SQL functions.
OpenZeppelin Contracts is a library of modular, secure, and reusable smart contract components designed for the development of decentralized applications. It provides a foundational framework for building standard-compliant contracts, offering battle-tested implementations for token standards, access control, and common utility patterns. The project distinguishes itself through its comprehensive support for complex architectural patterns, including proxy-based upgradeability, role-based access control, and account abstraction. It enables developers to implement modular logic injection via hoo
Limits smart account operations by maintaining allowlists of specific function selectors.
This project serves as a comprehensive technical reference and educational platform for the Ethereum ecosystem. It provides a deep dive into the fundamental architecture of decentralized ledger systems, covering the core mechanisms that enable trustless state transitions, cryptographic security, and network consensus. The documentation distinguishes itself by bridging high-level conceptual frameworks with practical implementation details. It details the lifecycle of smart contract development, from source code compilation and bytecode analysis to deployment and interaction patterns. Furthermo
Implements granular access controls and decorators to manage function visibility and state access in smart contracts.
Sui is a blockchain platform featuring an object-centric state model and resource-oriented smart contracts. It utilizes parallel transaction execution to increase network throughput and supports programmable transaction blocks that bundle multiple operations into single atomic units. The platform distinguishes itself with a capability-based access control system and zero-knowledge login mechanisms, enabling users to authenticate via identity providers without seed phrases. It also implements deterministic object addressing to allow predictable state lookups and supports the creation of soulbo
Constrains the execution of generic functions to only be authorized by the defining module.
CodeIgniter is a PHP web framework built on the Model-View-Controller pattern, designed for building full-stack web applications. It provides a lightweight toolkit with minimal configuration, organizing application logic into controllers, models, and views for clean separation of concerns. The framework includes a fluent query builder for constructing SQL statements programmatically, PSR-4 autoloading with namespace mapping, and a service-based dependency injection container for managing shared class instances. The framework distinguishes itself through its comprehensive set of built-in tools
Provides built-in functions for input filtering, XSS cleaning, and other security tasks.
django-guardian est une bibliothèque de permissions d'objets Django qui permet l'attribution de droits d'accès granulaires à des enregistrements de base de données individuels. Ce système fournit un contrôle d'accès au niveau de l'objet, permettant aux utilisateurs ou aux groupes de se voir accorder des permissions pour des instances de modèle spécifiques plutôt que d'appliquer une règle globale unique à un modèle de données entier. La bibliothèque inclut un gestionnaire de permissions pour l'interface administrative Django, qui fournit un tableau de bord visuel pour attribuer et auditer ces règles de sécurité spécifiques à l'instance. Elle dispose également d'un contrôleur d'accès anonyme pour définir et vérifier les permissions pour les visiteurs non authentifiés. Le framework implémente un contrôle d'accès basé sur les rôles et prend en charge des permissions utilisateur granulaires à travers diverses instances de contenu.
Defines policies that allow unauthenticated anonymous visitors to access specific objects.
This project is a comprehensive library of reference implementations and patterns for building web applications using the Go Fiber framework. It provides curated templates and implementation guides for creating REST APIs, web servers, and structured backend services. The repository serves as a practical resource for applying architectural patterns, including Clean and Hexagonal architectures, as well as port-and-adapter decoupling. It offers detailed examples for integrating common web features such as OAuth2 authentication, JWT verification, WebSockets for real-time communication, and server
The project's ability to grant permission to unauthenticated users to invoke a function via resource-based policies.