Pepabo, Inc. 2019.07.25 GopherCon 2019 Optimization for number of goroutines using feedback control Principal engineer Yusuke MIYAKE @monochromegane Pepabo R&D Institute, GMO Pepabo, Inc. https://blog Design Implementation Runtime Concurrent Parallel • Thread management • Race conditions • Memory access sync • Deadlocks • Starvation • Granularity • Number of concurrency 1. Concurrency and Parallel • Thread management • Granularity • Number of concurrency • Race conditions • Memory access sync • Deadlocks • Starvation Runtime scheduler of Go �17 G M P G G Local Run Queue Global

Golang Warsaw #56 Jakub Wołynko Secure access to EC2 (for developers) Agenda – introduction – EC2 in native environment – 3-tier architecture intro – alternative methods of resource connection: groups or equivalent 3-tier architecture3-tier architecture - props and cons – full control over resource access – possibilities of disconnection resources from the internet – in general, more secure – architecture getting more complex – additional costs like VPN, NatGateway – regular resource access become more annoying solution one - bastion host Host Instance ProxyJump Bastion PreferredAuthentications

Data Access Version 5.3.36-SNAPSHOT Table of Contents 1. Transaction Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . or Repository Classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66 3. Data Access with JDBC. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 3.1. Choosing an Approach for JDBC Database Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 3.2. Package Hierarchy

Ov Over erview view Casdoor is a UI-first Identity Access Management (IAM) / Single-Sign-On (SSO) platform based on OAuth 2.0, OIDC, SAML, and CAS. Casdoor serves both the web UI and the login requests supports authorization management based on Casbin. It supports ACL, RBAC, ABAC, and RESTful access control models. 4. Casdoor provides phone verification code, email verification code, and password retrieval The Application will prompt the user: "Hey, I need some resources and I need your permission to access these resources. Can you go to this URL and enter your username and password for me?" With the

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 6. Keeping control over HTML . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . wicket-core wicket-auth-roles Provides support for role-based authorization. wicket-core wicket-ioc This module provides common classes to support Inversion Of Control. It’s used by both Spring and Guice integration grouping them into interfaces (you can find them in package org.apache.wicket.settings). We can access these interfaces through getter methods that will be gradually introduced in the next chapters when

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 6. Keeping control over HTML . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . wicket-core wicket-auth-roles Provides support for role-based authorization. wicket-core wicket-ioc This module provides common classes to support Inversion Of Control. It’s used by both Spring and Guice integration grouping them into interfaces (you can find them in package org.apache.wicket.settings). We can access these interfaces through getter methods, which will be gradually introduced in the next chapters

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 6. Keeping control over HTML . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . wicket-auth-roles Provides support for role-based authorization. wicket-core, wicket-tester wicket-ioc This module provides common classes to support Inversion Of Control. It’s used by both Spring and Guice grouping them into interfaces (you can find them in package org.apache.wicket.settings). We can access these interfaces through getter methods, which will be gradually introduced in the next chapters

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 6. Keeping control over HTML . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . wicket-auth-roles Provides support for role-based authorization. wicket-core wicket-ioc This module provides common classes to support Inversion Of Control. It’s used by both Spring and Guice integration grouping them into interfaces (you can find them in package org.apache.wicket.settings). We can access these interfaces through getter methods, which will be gradually introduced in the next chapters

团队提倡使用权限和明确为角色指定权限替代原始的将权限隐含于角色中的方法，这样 你可以对程序安全提供更强的控制。 基于资源的访问控制 读一下这个文章：新的RBAC：基于资源的权限管理(Resource-Based Access Control)，这篇 文章深入讨论了使用权限和明确为角色指定权限代替旧的将权限隐含于角色中方法的好处 （以及对源代码的影响）。 Users用户 一个用户本质上是程序中的“谁”，如同我们前面提到的，Subject Shiro 1.2.x Reference Manual 中文翻译 46 6. Authorization 授权 直接在程序中为当前 Subject 实例检查授权可能是最简单也最常用的方法。 Role-Based Authorization 基于角色的授权 如果你要基于简单/传统的角色名进行访问控制，你可以执行角色检查： Role Checks 角色检查 如果你想简单地检查一下当前Subjec 想对某个用户在所有领域（不仅仅是打印机）授"view"权限，你可以这样做： *:view 这样任何对"foo:view"的权限检查都将返回true。 Instance-Level Access Control 另一种常见的通配符权限用法是塑造实例级的访问控制列表。在这种情况下，你使用三个部 件——第一个是域，第二个是操作，第三个是被付诸实施的实例。 简单例子 printer:query:lp7200