講者資訊
方亞伯（Abraham Fong）
TSMC
Senior Engineer
My name is Abraham Fong, a backend software engineer working at the intersection of DevSecOps, most recently with Golang. I began my “Dev” journey as a full-stack developer, funding my Computer Science degree in the U.S. through part-time work. During internships at Charles Schwab and The Walt Disney Company, I moved into “Ops” through mobile middleware and SRE roles. After graduation, I automated cloud infrastructure at Disney using AWS Terraform. I later transitioned into “Sec” at PayPal, helping build a secure SDLC. Today at TSMC, I help build a secure developer platform enabling scalable, fine-grained authorization for AI systems.
演講議程
ReBAC with OpenFGA, Powered by MCP
(限額48人，人數超過開放旁聽)
ReBAC with OpenFGA, Powered by MCP
As apps grow, figuring out ""who can see what"" becomes a mess. Often, permission rules are scattered everywhere in the code, making them impossible to track. This workshop fixes that by treating authorization like infrastructure—just like a database.
What you’ll learn:
- The Basics of ReBAC: Learn Relationship-Based Access Control. It’s a way to manage access using real-life relationships (like teams and folders) instead of messy ""yes/no"" code.
- Hands-on Practice: Use Docker to set up OpenFGA. You will build a system similar to Google Drive to manage users and files.
- The DevOps Angle: See how to use an MCP server and AI to help you write and improve your permission rules faster. Using AI as a partner makes your DevOps workflow much smoother.
Who should join?
This is for backend developers and engineers who want to stop worrying about broken permissions. If you’ve ever said, ""we’ll fix the security later,"" this workshop is for you!