3 ms·
Hmmh, auditing doesn't seem to be mentioned in that paper. I'd think that's a mandatory feature of an authorization service.
by guenthert 6y ago
Hmmh, auditing doesn't seem to be mentioned in that paper. I'd think that's a mandatory feature of an authorization service.
- skj 6y agoIn Google, auditing is handled separately. The availability guarantees necessary for basic authorization are far more strict than auditing. Auth fails closed, audit fails open. Anything that can be stripped out of auth should be, even if we're talking about a best effort extra rpc from the auth service. Auditing typically needs more information than auth as well, and making the auth pipe wide is a risk.