# Authorization · Tech watch

[Canonical source](<https://sebastien.rigaux.be/en/tech-watch/tags/authorization>)

Controlling access to actions and data through roles, permissions and policies.

## [Data API builder: REST, GraphQL and MCP for your databases](<https://sebastien.rigaux.be/en/tech-watch/links/data-api-builder-rest-graphql-and-mcp-for-your-databases>)

Data API builder generates REST and GraphQL endpoints, as well as MCP tools, from Azure databases and on-premises stores. It supports several backends, including Azure SQL, SQL Server, PostgreSQL, MySQL and Cosmos DB, and runs in a container or locally during development.

Configuration defines entities and their permissions; DAB then translates requests into SQL. This layer reduces the API code teams need to maintain, while access remains shaped by the configuration and each database’s capabilities.

2026-10-22 · [Markdown](<https://sebastien.rigaux.be/en/tech-watch/links/data-api-builder-rest-graphql-and-mcp-for-your-databases.md>) · [Original resource](<https://github.com/Azure/data-api-builder>)

## [A Next.js SaaS starter with authentication and multi-tenancy](<https://sebastien.rigaux.be/en/tech-watch/links/a-next-js-saas-starter-with-authentication-and-multi-tenancy>)

This boilerplate combines Next.js, Tailwind and shadcn/ui with authentication, roles and team support. Database, internationalization and testing foundations help bootstrap a SaaS application.

2025-07-19 · [Markdown](<https://sebastien.rigaux.be/en/tech-watch/links/a-next-js-saas-starter-with-authentication-and-multi-tenancy.md>) · [Original resource](<https://github.com/ixartz/SaaS-Boilerplate>)

## [ZenStack: combine data models, validation and access control](<https://sebastien.rigaux.be/en/tech-watch/links/zenstack-combine-data-models-validation-and-access-control>)

ZenStack combines a typed ORM, validation and access policies for TypeScript applications. It also provides generated CRUD services and hooks for connecting interfaces to data.

2025-01-12 · [Markdown](<https://sebastien.rigaux.be/en/tech-watch/links/zenstack-combine-data-models-validation-and-access-control.md>) · [Original resource](<https://github.com/zenstackhq/zenstack>)

## [Model application security flows during architecture design](<https://sebastien.rigaux.be/en/tech-watch/links/model-application-security-flows-during-architecture-design>)

Damien Bod proposes security context models centered on authentication and authorization flows. The diagrams help identify trust boundaries and design mistakes before implementation.

2023-05-02 · [Markdown](<https://sebastien.rigaux.be/en/tech-watch/links/model-application-security-flows-during-architecture-design.md>) · [Original resource](<https://damienbod.com/2023/05/01/application-security-context-models/>)