RBAC Group-Based Redesign: Policies, Overrides & Compilation

cover photo

Welcome to the RBAC Group-Based Redesign Course

Everything you need to create, assign, and safely compile permission policies on the GFS SaaS platform.

🗂️
5
Sections
✅
4
Quizzes
⏱️
~40
Minutes
🔐
RBAC
Policies & Grouping

This course covers the new Policy layer (backend name: PermissionGroup) that sits on top of the existing GFS SaaS RBAC system. You'll understand how policies work well enough to create, assign, and safely compile them for real levels.

What's covered

1 Why This Redesign Exists — the flat-JSON problem and the ManageAcl conflict
2 Core Concepts & Naming — Policy vs PermissionGroup, and how to reuse and organize policies correctly
3 Hands-On: Creating & Assigning Policies — the JSON + sync workflow, and the UI path
4 Worked Example & Final Assessment — migrate a real level yourself, end to end
Stack: Laravel · React · MySQL · GFS SaaS RBAC

Restarting IBM (NFUFAL / EVOQA)

Secure APIs


In this course, you will gain a deep understanding of securing APIs and enterprise applications using real-world scenarios from the Odyssey platform. It takes about 2-3 hours to complete. After finishing, you'll be equipped with the knowledge and skills to build secure API-driven solutions.

Your learning journey

  1. Fundamentals of API Security — core concepts, vulnerabilities, frameworks
  2. Authentication & Authorization — API keys, JWTs, OAuth2, access control
  3. Secure API Design & Development — input validation, injection prevention, error handling
  4. Testing & Validation — security testing, penetration testing, config validation
  5. Monitoring & Incident Response — logging, anomaly detection, response planning
  6. Governance & Best Practices — policies, compliance, emerging trends
Hands-on labs: The course includes practical labs to reinforce your learning. Be sure to complete them to solidify your skills.

Security Measures to Take While Coding

This course teaches how to write secure and safe code by following important security practices. It explains the need to validate and sanitize user input to prevent harmful data, and how to use strong authentication and proper authorization to control access. You will learn to store passwords securely using hashing methods like bcrypt and protect applications from common attacks such as SQL injection and XSS. The course also covers using CSRF tokens to prevent unauthorized requests and securing sensitive data through encryption and HTTPS. It highlights the importance of not exposing detailed error messages in production, keeping dependencies updated, and securing APIs with authentication and rate limiting. Additionally, it emphasizes following the principle of least privilege and regularly testing and reviewing code to build reliable and secure applications.

DevOps Onboarding

Devops Onboarding

This course covers the infrastructure and deployment tools every Taurus developer works with daily. You'll understand Docker deeply enough to debug any container issue, read and modify CI/CD pipelines, and know exactly what happens when your code ships to production.

Mobile Onboarding

Mobile Onboarding

This course walks you through the mobile development environment, project architecture, Git workflow, and Flutter fundamentals used at Taurus. By the end you'll have the app running locally and understand how features are built.

Web Backend Onboarding

Backend Onboarding

This course covers the API layer every Taurus product is built on. You'll understand Laravel deeply enough to build and debug any endpoint, write clean service-layer code that reviewers approve on the first pass, and know exactly what happens when a request travels from the route file to the database and back.

Web Frontend Onboarding

Web Onboarding

This course walks you through the frontend development environment, project architecture, Git workflow, and Next.js fundamentals used at Taurus. By the end you'll have the app running locally and understand how features are built and connected to the API.

Developer Onboarding - Taurus

Onboarding

Complete developer onboarding course for Taurus. Covers local environment setup, project architecture, Git workflow, Flutter mobile development, REST API integration and testing, plus role-specific tracks for Frontend (React), Backend (PHP/Laravel), and Mobile (Flutter) developers. Includes quizzes, checklists, and a final assessment with 80% pass mark.

Intro to AWS for Taurus Engineers