When we think about accounts and security, we often think about identity, logging in and

proving who we are.

But for many applications, especially internal apps at large organizations, that's just step

one.

The next step is, what can we do and what can we not do?

On this episode, you'll learn about a new library called Oso.

It's a declarative way to create policy code that maps your mental model for who is allowed to do what in your system.

We have two guests, Graham Neary and Sam Scott from the Oso Project, to tell us all about it.

This is Talk Python to me, episode 294, recorded October 23rd, 2020.

Thank you. Welcome to Talk Python to me, a weekly podcast on Python, the language, the libraries, the ecosystem, and the personalities.

This is your host, Michael Kennedy. Follow me on Twitter where I'm at M. Kennedy,

and keep up with the show and listen to past episodes at talk python.fm.

And follow the show on Twitter via at Doc Python.

Before we get to the interview, let me tell you about a brand new course that we just launched.

At Talk Python, we run a bunch of web apps and web APIs.

These power the training courses as well as the mobile apps on iOS and Android. If I had to build these from scratch

again today, there's no doubt which framework I would use. It's Fast API. To me, Fast API is

the embodiment of modern Python and modern APIs. You have beautiful usage of type annotations.

You have model binding and validation with Pidantic,

and you have first class async and await support.

If you're building or rebuilding a web app,

you owe it to yourself to check out our newest course.

...