Why Authorization is Hard

Explore the complexities of implementing authorization in software applications through this insightful PyCon US talk. Delve into the three key building blocks of authorization: enforcement, decision architecture, and modeling. Discover why these components present unique challenges, especially within the Python ecosystem. Learn about the difficulties of enforcing authorization across various application layers, the complexities of separating authorization logic from application data, and the challenges of creating scalable authorization models. Gain valuable insights into different approaches for solving these issues, along with their associated trade-offs. Equip yourself with the knowledge to make informed decisions when implementing authorization in your own projects.

Introduction
What is Authorization
Why Authorization is Important
Modeling Authorization
Enforcement
In a nutshell
Architecture
Centralized Logic
Decentralized Data
Centralize Data
Resources