Almost every internet-facing application has the concept of users and permissions, usually summarized as access control.

Access control has many facets because it typically represents the access control structure of a real-world entity (e.g. company). While there is no silver bullet, not everything has to be reinvented.

Yet, developers spend days, weeks, even months on learning about or coming up with authentication and authorization schemes

This session will explain factors to be considered before doing this and ways that it can prove effective.