Permissions Management with the Privacy Files Podcast
Published: 2024-03-26 16:24:09

---
title: Permissions Management with the Privacy Files Podcast
published: true
date: 2024-02-21 10:02:46 UTC
tags: 
canonical_url: https://authzed.com/blog/permissions-management-with-the-privacy-files-podcast
---

<iframe style="border-radius:12px" src="https://open.spotify.com/embed/episode/4xC32ZAlB9UuJfpfrEdso9?utm_source=generator&amp;theme=0" width="100%" height="352" allow="autoplay; clipboard-write; encrypted-media; fullscreen; picture-in-picture"></iframe>

Jake joined The Privacy Files podcast, where he discussed the world of permissions and access control. Throughout the episode, listeners are treated to an in-depth exploration of the evolution of permissions management technologies, underscoring the essential role of advanced access control systems in ensuring digital privacy.

### Introduction to Permissions and Access Control in Airports

- Rich shares observations from airports on controlled access and permissions.
- Examples include security at drop-off/pickup points, boarding pass requirements for gate access, TSA regulations on liquid amounts, and restricted areas for authorized personnel.
- Access to airport lounges requires a special pass, indicating controlled entry based on permissions.

### Introduction to Permissions Management

- Jake focuses on permissions management technology.
- Discussion on the importance of not hand-rolling security, especially permissions management, due to the high risk of introducing vulnerabilities.
- Permissions management is critical yet challenging, and it's advisable to rely on experts in the field.

### The Importance and Challenges of Permissions Management

- Jake emphasizes the shift towards outsourcing non-core competencies, including permissions management, similar to cloud adoption.
- Permissions management examples include bank account access rights and Google Docs permissions.
- The conversation touches on the significance of permissions in ensuring privacy and control over one's data.

### Jake's Background and Interest in Permissions Management

- Jake's experiences at Amazon and Google influenced his interest in building large services focused on the developer experience.
- The origin of AuthZed was inspired by challenges faced in managing permissions in previous ventures, highlighting the need for a specialized solution in permissions management.

### Common Pitfalls in Developing Permissions Code

- Jake discusses the dangers of developing custom permissions code, including security vulnerabilities and scalability issues.
- Broken access control is highlighted as a top security vulnerability, underscoring the importance of expertly managed permissions systems.

### Transitioning to AuthZed and the Concept of Cloud-Native

- Jake's journey from IBM to founding AuthZed, driven by entrepreneurial spirit and the desire to address permissions management challenges.
- Explanation of cloud-native versus cloud-based applications, focusing on security responsibilities and innovations in cloud services.

### SpiceDB and AuthZed's Mission

- AuthZed aims to provide a comprehensive solution for permissions management inspired by Google's Zanzibar paper.
- SpiceDB, as an open-source implementation of Zanzibar, represents AuthZed's contribution to simplifying permissions management for companies.

### Challenges in Selling Infrastructure to Enterprises

- Discusses the challenges of capturing attention and convincing enterprises of the need for specialized permissions management solutions.
- The trend towards proactive engagement with permissions management solutions, rather than reactive responses to breaches.

### Real-World Implications of Permissions Mismanagement

- Examples of permissions-related breaches and the silent nature of some breaches pose significant risks to both companies and individuals.
- The evolving landscape of permissions management and the increasing recognition of its importance in corporate security and compliance.

### Personal Insights and Advice on Privacy and Security

- Jake shares personal experiences and the impact of working in the permissions management space on his privacy consciousness.
- Advice for individuals on enhancing their digital privacy and security, emphasizing the importance of being selective and cautious with data sharing.