authz-constraints - Backend Authorization (authZ) Constraints and Best Practices
Defines rules for backend authorization including fail-close policy, two-level checks, centralized enforcement, multi-tenancy, and audit logging.
Tags
Updated: 2026-09-17Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Enforce fail-close authorization rules
- Perform two-level permission checks
- Centralize authorization decision logic
- Implement multi-tenant data isolation
- Record structured audit logs
Inputs
- User session identity
- Authorization rules and policies
- Resource ownership and tenant identifier
Outputs
- Authorization decision responses
- Structured authorization audit logs
Requirements
- Authentication mechanism (authN)
- Backend service execution environment