RBAC - PropelAuth Blog | PropelAuth Blog

RBAC

A collection of 12 posts

Advanced Roles and Permissions

Advanced Roles and Permissions

Today we’re bringing our RBAC system to the next level with the addition of Roles & Permission Mappings. Mappings make it possible for you to configure roles and permissions on a per-org basis. It’s best explained by an example: * You have two pricing plans: Free and Paid * Users

Recreating Stripe’s Roles in PropelAuth

Recreating Stripe’s Roles in PropelAuth

Stripe is a platform that allows companies of all sizes to accept payments, issue invoices and generally manage their billing. Their offering is necessarily a bit complex, and they have a roles structure to match. Every user can have a combination of roles that allows them access to certain features

Guide to RBAC for B2B SaaS

Guide to RBAC for B2B SaaS

Role based access control (RBAC) is a method of answering the question “Can a user do this thing?” If you’ve ever used a product where some users are "Admins" or "Owners", and they can do more than everyone else, you’ve used a product with

Building a Multi-Tenant App with FastAPI, SQLModel, and PropelAuth

Building a Multi-Tenant App with FastAPI, SQLModel, and PropelAuth

Building a multi-tenant (sometimes also known as B2B) product can be a trickier than building for consumers. Instead of handling users as individuals, you generally have to handle them working together in groups or teams. In this tutorial, we’ll walk you through how to create a multi-tenant link shortening

What Does Authorization Actually Mean

What Does Authorization Actually Mean

The word “auth” is complicated because there are a wide range of topics that fall in the bucket of “auth.” In this series, we’ll take a practical approach to understanding many of these topics with examples to learn from. What is Authorization? Authorization is the process of determining if

React Hooks for Multi-Tenancy and Authorization w/ PropelAuth

React Hooks for Multi-Tenancy and Authorization w/ PropelAuth

Say you built a SaaS application for restaurants to track information about their orders. There are multiple people at the restaurants who need access to this information. There’s an owner, there are managers, and there are frontline employees who need access too. Each of these users will have different

Roles and Permissions in Plain English

Roles and Permissions in Plain English

Let’s say you build newspaper websites for local newspapers. Your simplest product is a newspaper website where everyone can post articles and everyone can read them. That’s not good.

Adding Customizable Roles and Permissions to PropelAuth

Adding Customizable Roles and Permissions to PropelAuth

We’re happy to share the latest update to PropelAuth—adding more customizability to role based access control (RBAC), so you can have full control over what your users can see and do within your product.

Why B2B Companies Waste More Time on Authentication

Why B2B Companies Waste More Time on Authentication

B2B companies have a lot of additional user authentication needs than B2C. You start with an organization ID and an invitation flow, and slowly you are adding roles and self-service UIs, and org-aware middleware.

RBAC Application Examples in Real World B2B Products

RBAC Application Examples in Real World B2B Products

Role based access control (RBAC) is a method of deciding who gets access to what based on their role. In this post, we’ll look at some real world applications using RBAC to see the value of designating hierarchal roles.

Creating a B2B Next.js Application

Creating a B2B Next.js Application

In this guide, we’ll build an example B2B application in Next.js where users can sign up, invite their coworkers to the product, and manage permissions for their teams (RBAC).

RBAC Authorization with FastAPI and PropelAuth

RBAC Authorization with FastAPI and PropelAuth

Role based access control (RBAC) is a method of deciding who gets access to what based on their role. In this post, we'll look at how to setup RBAC quickly with FastAPI and PropelAuth.