ricberw

Curious how people handle least-privilege access when integrating third-party APIs that only offer a single coarse permission scope (or limited scopes that are still over-provisioned for a specific use case).

A lot of services expose APIs where the token basically grants everything the integration can do (read/write/delete across the entire account), making it hard to enforce the principle of least privilege internally when multiple internal services or agents are calling the same API.

In those cases, do you...

Put an API proxy/gateway in front of the third-party API to enforce granular permissions?

Use RBAC/ABAC rules in a proxy layer to filter which endpoints/actions can be called?

Just accept the coarse permissions and risk associated?

Something else?

Would love to hear real architectures people are using in production, especially when the upstream API itself doesn’t support fine-grained scopes.

Is it down for you?

I’m very curious whether the outcome will significantly change your plans to build product — and how the differences in policy will change the startup ecosystem.

More vices? Less vices?

Start something? End something?

Looking forward to hearing what the HN community is resolved to do in 2024 :)

Could also be any written content, like a blog post or an essay.

Disappointed native San Franciscan here, hoping to find solace in other locals who are also experiencing the same challenge that I am now facing.

Last week, around Thursday, we noticed a significant flavor change in our water. More chlorine-y.

That day, I started having the acidic heartburn feeling for the first time in a while. The feeling has continued since then, and I’ve been taking a Tums at least once a day to combat it. No change in diet. Main change is the water (and I basically only drink straight tap water).

I got curious. I bought some 16-in-one freshwater quality test strips. I had a glass bottle of water from a couple of weeks ago, and I also had fresh tap water. I tested the “old” water and compared to the “new” water a couple of times each.

To my surprise, there were two distinct differences in the readings:

1. The pH of the old water was 6.5, while the pH of the new water was 6.0. More acidic.

2. The alkalinity of the old water was 40ppm, while the alkalinity of the new water was 0ppm. Less control of pH.

Both of these are outside the EPA’s recommended ranges for drinking water.

I’ve been drinking tap water here for my entire life, and losing rights to drink the water that the other half of my city is drinking (and paying the same amount for) makes me very, very disappointed.

Any suggestions for how to fix this / who to track down?

Are others willing to experiment and validate with some citizen science, then band together with me to push for change?

Hope so.

Thanks for reading.

Do you shop for yourself? Or someone else? Or both? Or neither?

If you shop for someone else, who is it? Why? How do you find the right things for them?

Would you be willing to tell the websites you're shopping on who you are shopping for?