sammyboi81

Authz Access Control — Design skill for Claude Code

Design community

Authorization design - object-level checks, IDOR/BOLA, RBAC/ABAC, tenant isolation, agent permissions.

How to install Authz Access Control

Installs to ~/.claude/skills/sammyboi81-bulwark-mcp-authz-access-control/SKILL.md

Terminal

mkdir -p ~/.claude/skills/sammyboi81-bulwark-mcp-authz-access-control && curl -fsSL https://raw.githubusercontent.com/sammyboi81/bulwark-mcp/HEAD/skills/authz-access-control.md -o ~/.claude/skills/sammyboi81-bulwark-mcp-authz-access-control/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Authz Access Control does

name: authz-access-control description: Authorization design - object-level checks, IDOR/BOLA, RBAC/ABAC, tenant isolation, agent permissions. tags: auth, web, api, core

Broken access control is the top web risk. Authentication says who; authorization says what, per object, every time.

Enforce on the server, in one central policy layer, on every request and every object (not just "is logged in").
IDOR/BOLA: when loading /orders/123, query by (id AND owner/tenant), or load and then c

Alternatives in Design

Brand Guidelines — Apply Anthropic's official brand colors and typography to artifacts 94.1k ★
NotebookLM Automation — Complete programmatic access to Google NotebookLM—including capabilities not exposed in the web UI 6.8k ★
Taiyi Forge — TaiyiForge engine control — init, next, harness, continue (OMX-style) 881 ★