For example, updating authorisation requirements will require code changes, along with the time taken to test and deploy these changes. Checking user or role permissions is also tricky, you'll need to review the code or documentation - and hope the documentation is still up to date! As systems grow, authorisation requirements will grow, and these limitations can slow new development and decrease maintainability.

In this talk, I'll demonstrate an approach using permission-based authorisation to overcome these limitations and improve the flexibility and visibility of access control across your system.