codfather #FBPE 🇪🇺🇫🇷 🏴󠁧󠁢󠁷󠁬󠁳󠁿🇺🇦

Technologist,Atheist,rationalist,empiricist and non-believer in unicorns, virgin births or Linux,Science,Wine and the Arts
@codfather.bsky.so

[codfather #FBPE 🇪🇺🇫🇷 🏴󠁧󠁢󠁷󠁬󠁳󠁿🇺🇦 @codfather]

Cods Plaice: Staying safe on the Web - what can I do to make my browsing safer https://t.co/rWe7Dudby9

[Meidas_Charise Lee @charise_lee]

Australia has entered the chat.

[Dr Milan Milanović @milan_milanovic]

Never check a role name in your code

In one of the projects where I worked, we had role checks in many places across the project. Then, we needed to introduce a new role and that was a cumbersome code change in many places.

RBAC stands for Role-Based Access Control. The path we selected was to give users roles and let the code ask "is this user a Manager?"

Yet, the model has one more part. Users get roles, roles get permissions and permissions define what a user can do.

The code should only ask about the permission, for example "can this user approve an invoice?"

Here is the complete flow:

𝟭. 𝗧𝗵𝗲 𝘁𝗼𝗸𝗲𝗻 𝗰𝗮𝗿𝗿𝗶𝗲𝘀 𝗿𝗼𝗹𝗲𝘀. We set up the identity provider to add them at sign-in.

𝟮. 𝗧𝗵𝗲 𝗔𝗣𝗜 𝘁𝘂𝗿𝗻𝘀 𝗿𝗼𝗹𝗲𝘀 𝗶𝗻𝘁𝗼 𝗽𝗲𝗿𝗺𝗶𝘀𝘀𝗶𝗼𝗻𝘀. It reads the mapping from its database and keeps a short cache.

����. 𝗧𝗵𝗲 𝗲𝗻𝗱𝗽𝗼𝗶𝗻𝘁 𝗰𝗵𝗲𝗰𝗸𝘀 𝗼𝗻𝗲 𝗽𝗲𝗿𝗺𝗶𝘀𝘀𝗶𝗼𝗻. It asks for invoices:approve and never names a role.

𝟰. 𝗔𝗻 𝗮𝗱𝗺𝗶𝗻 𝗮𝗱𝗱𝘀 𝗮 𝗻𝗲𝘄 𝗿𝗼𝗹𝗲 𝗮𝘀 𝗱𝗮𝘁𝗮. The admin creates the Auditor role in the identity provider. One table row maps it to invoices:read. The code stays the same, and nothing gets deployed.

In https://t.co/PLYLs2PAEE Core, the endpoint gets [Authorize(Policy = "invoices:approve")]. It replaces [Authorize(Roles = "Manager")]. Behind it, a policy provider turns that name into a requirement. A handler checks it against the user's permissions.

[codfather #FBPE 🇪🇺🇫🇷 🏴󠁧󠁢󠁷󠁬󠁳󠁿🇺🇦 @codfather]

@bambibristol 😂

[Ian L Richardson @ianrich15813274]

Natalie is at it again - but it can't be Trump, he's got the Bible the right way up, & his ankles aren't swollen.✝️⛔️

[codfather #FBPE 🇪🇺🇫🇷 🏴󠁧󠁢󠁷󠁬󠁳󠁿🇺🇦 @codfather]

@ianrich15813274 😂

[codfather #FBPE 🇪🇺🇫🇷 🏴󠁧󠁢󠁷󠁬󠁳󠁿🇺🇦 @codfather]

@archer_rs Yes of course, it's been a disaster.

[dave lawrence 🐟🐟🐠 @dave43law]

Reform - dragging you backwards through time........

[Programmer Humor @PR0GRAMMERHUM0R]

tenMinutesWasEnough

[The Linux Foundation @linuxfoundation]

"I'm doing a (free) operating system (just a hobby, won't be big and professional like gnu)..."

On August 25, 1991, a 21-year-old student sent a message to a Usenet newsgroup. He thought he was just building something fun for himself.

35 years later, that "hobby" is the backbone of global technology:

🚀 Powering helicopters in space with NASA
☁️ Running the global cloud and 100% of the world’s supercomputers
📱 Connecting billions of people
🎮 Redefining the future of handheld gaming

What started as one student's side project became the greatest collaborative technology movement in history. Thank you to every maintainer, contributor, and advocate who made it possible.

Happy 35th Birthday, Linux. Here’s to the power of open source and the next 35 years of building together.

https://t.co/KDN6Coob7F

#Linux35

[codfather #FBPE 🇪🇺🇫🇷 🏴󠁧󠁢󠁷󠁬󠁳󠁿🇺🇦 @codfather]

@ScottDog6 @LqLana 😂🤡

[Ben @Benjyboyo1]

@Rainmaker1973 Tuscany Italy 🇮🇹🙏🏼

[codfather #FBPE 🇪🇺🇫🇷 🏴󠁧󠁢󠁷󠁬󠁳󠁿🇺🇦 @codfather]

😂

[Massimo @Rainmaker1973]

If you missed the solar eclipse, this is what it looked like:

[codfather #FBPE 🇪🇺🇫🇷 🏴󠁧󠁢󠁷󠁬󠁳󠁿🇺🇦 @codfather]

😂

[Count Binface @CountBinface]

An American interviewer asked me about my political beliefs. #VoteBinface

[Count Binface @CountBinface]

An American interviewer asked me about my political beliefs. #VoteBinface

[Mark Hammond @MarkHam80780803]

“I’ve been selected to stand as a Conservative councillor in Somerset.”

[monty and lottie. (emma) @montysbiscuit]

@MarkHam80780803 🤔

[ALASTAIR CAMPBELL @campbellclaret]

I don’t know what is going on here but it looks like I am trying to break up a fight!! Interview with @countbinface out soon. Meanwhile new @restispolitics Q&A out now - India protests, Saudi nukes, AI date centres, Trump bonkers speech to White House correspondents dinner &more

[Peter Jukes @peterjukes]

I think a lot of people have missed this. Until the police investigation in February last year, Reform UK’s financial structures were all tied up with Cottrell and his Montenegro base

https://t.co/HhfZOB7VEq

[Lord Sydes #NAFO #FBPE 🇬🇧🇩🇪🇸🇬🇫🇮🇪🇺 @SydesJokes]

My #Top1000 #NAFO Accounts for 29th July 2026

376. @CarstenWB* (Down) #NAFO
https://t.co/cbUCGXdrhz

377. @jflucke* (Down) #NAFO
https://t.co/jlas7nprvj

378. @NikolajMeedom* (Down) #NAFO
https://t.co/3RQk1M2RRZ

379. @FellaBoston* (Down) #NAFO
https://t.co/9dp5fimoy7

380. @ChevroletCChase* (Down) #NAFO
https://t.co/oRYfvgEJzu

381. @GrootCorine* (Down) #NAFO
https://t.co/skNWgDXwit

382. @earphorny* (Up) #NAFO
https://t.co/Odk3BiV35G

383. @Dmjhest* (Down) #NAFO
https://t.co/To5EHGWVtn

384. @pawpgandist* (Down) #NAFO
https://t.co/juI74LQy2Q

385. @DennisG_ol* (Down) #NAFO
https://t.co/TgTrVTgm21

386. @ConstancePeck9* (Down) #NAFO
https://t.co/plqWyvJgOR

387. @Hlava22* (Down) #NAFO
https://t.co/eoB5I6a96U

388. @Satan_the_8th* (Down) #NAFO
https://t.co/7qCfH5SWdy

389. @tezbar* (Down) #NAFO
https://t.co/z015NDKzX5

390. @AndriyZhurba* (Down) #NAFO
https://t.co/XhMMkCd6od

391. @PhoenixRebornUA* (Down) #NAFO
https://t.co/3QAYW1BOZs

392. @manu100por100* (Down) #NAFO
https://t.co/uFuIciUDo0

393. @SweetieCanuck* (Down) #NAFO
https://t.co/BPumCQyds4

394. @SassyFellina* (Down) #NAFO
https://t.co/YB5nGtugtO

395. @genaudas1* (Down) #NAFO
https://t.co/0vI2N3iqL4

396. @jc_van_d* (Down) #Smokefleet
https://t.co/FGqkAKUjeI

397. @VanCrystl* (Down) #NAFO
https://t.co/cJflGWWjLw

398. @OrugaNafo* (Down) #NAFO
https://t.co/GC0bB85jOD

399. @MorganV2468* (Down) #NAFO
https://t.co/dynsWnE732

400. @Kappa2316* (Down) #NAFO
https://t.co/p81Kj09p3B

#NAFO #Smokefleet #SupportUkraine @u24_gov_ua https://t.co/lyKONDVLYA