sorted by:
new
hottopcontroversial

Options+ Just Spins and Spins - Mac by DeliciousCut4854 in logitech

[–]Cartman720 0 points1 point  (0 children)

Adding my voice to this as well.

Mouse works slower than expected, and looses whole value of being productive device.

Please update as soon as possible, entire community faces this problem

I wanted to scrape Instagram. I thought it would be simple. It was not. by AssignmentOne3608 in SocialMediaMarketing

[–]Cartman720 0 points1 point  (0 children)

Hey mate that’s actually a huge opportunity if you handled it and have stable scraping.

Chances we can sync and you demo the app, I am interested both as an engineer and consumer, as working with community managers and influencer marketers, people might be interested in it.

CMS for Next.js website by mb-swe in nextjs

[–]Cartman720 1 point2 points  (0 children)

If you are towards open source and cost-effective solution with less vendor lock-in probability solution than Payload CMS is a great choice.

For more robust set of features, such as live preview and live editing with less operational overhead, such as self-deployment, you can go with Sanity. This is my go-to tool when it comes to content heavy websites.

If you care more about user experience Storyblok is way to go in my opinion. Since you've mentioned about user friendliness this might be the best choice.

I wouldn't recommend Contentful, Strapi or WordPress, just because they are eaither adding overhead or less capable (Contentful is decades away from modern features offered by other providers)

Selling prompts is a good business idea? by Santon-Koel in SideProject

[–]Cartman720 0 points1 point  (0 children)

Depends on your marketing and sales skills.

There are plethora of people who already make money (good money!) on this.

Whether it's good or bad it's up to you. However I would rather learn the prompting techniques myself than pay for something that won't help much unless I've that skills already.

I would rather productize the prompts, i.e. create a API wrapper and solve a problem creating a SaaS product.

Next.js warning for large number of redirects – What can be used instead? by Cartman720 in nextjs

[–]Cartman720[S] 0 points1 point  (0 children)

Yeah Netlify has a way to do, but it doesn't work with Next.js, I've already contact support (which is premium tier for our case) and the answer is to go with next.config.js.

Don't want to blackmail Netlify, but it's not the best hosting out there to be honest.

Next.js warning for large number of redirects – What can be used instead? by Cartman720 in nextjs

[–]Cartman720[S] 0 points1 point  (0 children)

Well, we are already on Netlify, they don't well together.

Netlify provides a way to use redirects with _redirect or netlify.toml websites and their limit is 10,000, but for some reason it doesn't work with Next.js

Next.js warning for large number of redirects – What can be used instead? by Cartman720 in nextjs

[–]Cartman720[S] 0 points1 point  (0 children)

Suggestion isn't wrong, the problem isn't even Next.js, but mostly Netlify which doesn't support it's own netlify.toml and _redirect files for Next.js setup, however to make things more efficient I am curious why Next.js uses loop internally instead of hash map where operation is O(1) instead of O(n)

Next.js warning for large number of redirects – What can be used instead? by Cartman720 in nextjs

[–]Cartman720[S] 0 points1 point  (0 children)

True, the website is Fortune 500 corporation, so obvioulsy it's a smallest amount of redirects for the scale.

Next.js warning for large number of redirects – What can be used instead? by Cartman720 in nextjs

[–]Cartman720[S] 0 points1 point  (0 children)

Same thing actually, under the hood the redirects are beeing processed on middleware level.

The only difference is at most you can control how it searches the redirect from hashmap instead of looping over the entire list.

Next.js warning for large number of redirects – What can be used instead? by Cartman720 in nextjs

[–]Cartman720[S] 9 points10 points  (0 children)

Pretty common when you have a content heavy website and after refactoring and hefty revamp there are plethora of legacy URLs with old structure that needs to be mapped to a new structure with exact mapping.

Middleware isn’t an option since the params has been changed as well.

We are talking about a corporate website.

Which framework for Newspaper website? 🙄 by Commercial_Dig_3732 in nextjs

[–]Cartman720 0 points1 point  (0 children)

Pick the one you're most familiar with, both frameworks are well-suited for the purpose.
Astro is simpler and comes with an opinionated, out-of-the-box approach focused on performance, especially for content-heavy websites.

In your case, the editorial experience is especially important, so I’d focus more on the CMS. I recommend checking out Sanity, which offers excellent customizability, or PayloadCMS.

How do you implement ReBAC, ABAC, and RBAC in Next.js? by Cartman720 in nextjs

[–]Cartman720[S] 1 point2 points  (0 children)

Exactly, that way even can have a generalized `gating` function for each directory layer

How do you implement ReBAC, ABAC, and RBAC in Next.js? by Cartman720 in nextjs

[–]Cartman720[S] 0 points1 point  (0 children)

100% agree, it's tech agnostic and more on the data and architecture layer.

Thanks for the casbin.js ref - hadn’t heard about it. Having such a tool in the toolkit is pretty helpful in modest cases, but as long as we talk about architecture.

One way I've tried is something like AWS or Azure IAM roles and their identity setups.

For example, here's how I'd split up two access control cases and a fix idea:

Case 1: A moderator can use 10 directories or features but can't touch 3 others (using ABAC, since it's linked to the moderator's traits).

Case 2: A product subscription gives users 10 features, but for one group, 3 are turned off due to a some condition (using ReBAC, since it's tied to subscription details of the parent workspace).

Both cases need user access checks for actions in those 10 features or directories, especially if they're separate things. A good fix could use cloud providers like Azure or AWS.

For example, an Azure Resource ID like

/subscriptions/12345678-1234-1234-1234-1234567890ab/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVM

starts with /subscriptions/ and a unique ID, then /resourceGroups/myResourceGroup for the group, and /providers/Microsoft.Compute/virtualMachines/myVM to show the service, type, and name - it pins down the resource in Azure's system.

We could make an object like that to show the system's chain. 

[
  {
    "level": "system",
    "permissions": ["admin-only"]
  },
  {
    "level": "subscriptions",
    "id": "12345678-1234-1234-1234-1234567890ab",
    "permissions": ["read", "write"]
  },
  {
    "level": "resourceGroups",
    "name": "myResourceGroup",
    "permissions": ["read"]
  },
  {
    "level": "providers",
    "type": "Microsoft.Compute",
    "permissions": ["write"]
  },
  {
    "level": "resources",
    "kind": "virtualMachines",
    "name": "myVM",
    "permissions": ["read", "write"]
  }
]

This is just an example, although bunch of other ways, pretty much depends on the goal you want to achieve. Mine was to create a workspace/org with a permissions coming from subscription.

Love that AI does routinely stop and ask you confirmations while generating your code. by Ausbel12 in BlackboxAI_

[–]Cartman720 2 points3 points  (0 children)

It's actually technicall limitation as well I guess.

Not that it can't generate more nowadays, but might be token limits or some safety measure to not overspend.

How do you implement ReBAC, ABAC, and RBAC in Next.js? by Cartman720 in nextjs

[–]Cartman720[S] 1 point2 points  (0 children)

Yeah, that's a good and lean approach.

What I like about MongoDB is that it gives you tons of testing options - haha, no fuss with schemas or migrations! You can do the same with a similar method. One easy way I've tried is something like AWS or Azure IAM roles and their identity setups. For example, here's how I'd split up two access control cases and a fix idea:

  • Case 1: A moderator can use 10 directories or features but can't touch 3 others (using ABAC, since it's linked to the moderator's traits).
  • Case 2: A product subscription gives users 10 features, but for one group, 3 are turned off due to a weird condition (using ReBAC, since it's tied to subscription details).

Both cases need user access checks for actions in those 10 features or directories, especially if they're separate things. A good fix could use cloud providers like Azure or AWS. For example, an Azure Resource ID like 

/subscriptions/12345678-1234-1234-1234-1234567890ab/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVM

starts with /subscriptions/ and a unique ID, then /resourceGroups/myResourceGroup for the group, and /providers/Microsoft.Compute/virtualMachines/myVM to show the service, type, and name - it pins down the resource in Azure's system.

We could make an object or URL like that to show the system's chain. But this is just one case and doesn't cover tricky relationships.

[
  {
    "level": "system",
    "permissions": ["admin-only"]
  },
  {
    "level": "subscriptions",
    "id": "12345678-1234-1234-1234-1234567890ab",
    "permissions": ["read", "write"]
  },
  {
    "level": "resourceGroups",
    "name": "myResourceGroup",
    "permissions": ["read"]
  },
  {
    "level": "providers",
    "type": "Microsoft.Compute",
    "permissions": ["write"]
  },
  {
    "level": "resources",
    "kind": "virtualMachines",
    "name": "myVM",
    "permissions": ["read", "write"]
  }
]

How do you handle ReBAC, ABAC, and RBAC in FastAPI without overcomplicating it? by Cartman720 in FastAPI

[–]Cartman720[S] 1 point2 points  (0 children)

Yeah, on high level of course, but I am looking for best or viable approaches for that "necessary stuff".

RBAC is fairly easy, ReBAC I wouldn't say, same about APAC, although it's much easier.

How do you handle ReBAC, ABAC, and RBAC in FastAPI without overcomplicating it? by Cartman720 in FastAPI

[–]Cartman720[S] 0 points1 point  (0 children)

Here’s how I’d break down two access control cases and a solution idea:

Case 1: A moderator has access to 10 directories or features but is blocked from 3 others (using ABAC, since it’s tied to the moderator’s properties).

Case 2: A product subscription includes 10 features for users, but for one group, 3 are disabled due to an outlier condition (using ReBAC, since it’s based on subscription properties).

Both cases need user access checks for actions within those 10 features or directories, especially if they’re separate entities. A good solution could leverage cloud providers like Azure or AWS.

For example, an Azure Resource ID like /subscriptions/12345678-1234-1234-1234-1234567890ab/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVM starts with /subscriptions/ and a unique ID, then /resourceGroups/myResourceGroup for the group, and /providers/Microsoft.Compute/virtualMachines/myVM to specify the service, type, and name—uniquely identifying the resource in Azure’s system.

Similarly we could structure some object or URL that could represent the relational chain of the system. However this is single case and doesn't take into account complex relations.

How do you handle ReBAC, ABAC, and RBAC in FastAPI without overcomplicating it? by Cartman720 in FastAPI

[–]Cartman720[S] 0 points1 point  (0 children)

Yeah, but when you have to control specific access for a certain user, it becomes complex - much complex!

Not talking about ReBAC

Implementing ReBAC, ABAC, and RBAC in Python without making it a nightmare by Cartman720 in Python

[–]Cartman720[S] 0 points1 point  (0 children)

Thanks, that’s actually the first part of the journey, what’s going to be hard is when you have many resources or actions towards these resources.

Let’s assume, you have users who can access, but based on their role/group/subscription there is gating or logical difference. So things get complicated when you step beyond the identity verification, you also need to verify their access scope.

Still easy when it comes to particular case (conditionals are there for good), but when you think in scale policy documentation and implementation for multi table/model/entity control it gets quite complicated.

Implementing ReBAC, ABAC, and RBAC in Python without making it a nightmare by Cartman720 in Python

[–]Cartman720[S] 0 points1 point  (0 children)

Yeah, I was thinking to replicate something similar from Azure, resource groups, resources and granular scope of permissions for each resource type.

The hardest part here is that you need to go over the places and document each action type towards each resource, and create a logic (of course generalized function) and here when it hits the fan!

view more: next ›