How deeply does Authorization in Action cover symbolic reasoning?

Translates policies into formulas and checks full request spaces, stopping short of general-purpose programming flexibility.

Symbolic reasoning

As explained in Authorization in Action

Symbolic reasoning analyzes general formulas representing sets of possible inputs and behaviors instead of checking only concrete examples.

Symbolic reasoning analyzes authorization rules across every schema-defined combination of principals, actions, resources, contexts, and relationships—not just concrete requests such as whether Alice can approve invoice 123. section 7.4.6

A symbolic policy analysis workflow:

Translate declarative policies into mathematical formulas representing possible requests. section 7.4.6
Use an SMT (Satisfiability Modulo Theories) solver to test whether those formulas can be satisfied. section 7.4.6
Inspect violations through concrete counterexamples, such as unauthorized invoice approval or deployment from an unmanaged device. section 7.4.6

How Authorization in Action covers it

liveBook manning.com

Read Authorization in Action on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Natural Language Processing in Action, Second EditionSymbolic reasoning is an artificial-intelligence technique that derives conclusions by manipulating explicit symbols, facts, and logical rules.
liveBook manning.com

Inside AISymbolic reasoning is reasoning that derives conclusions by manipulating explicit symbols according to formal rules and logic.

Compare how 3 books explain symbolic reasoning →

Related concepts

probabilistic reasoningcontrasts with · Probabilistic reasoning is drawing or selecting conclusions under uncertainty by representing and evaluating possibilities using probabilities.
generationequivalent to · Generation is the computational production of outputs from supplied inputs or context, often by applying a model to produce predictions or new content.
static analysisimplements · Static analysis is the examination of source code or other program artifacts without executing the program to infer properties or identify potential issues.
tokenizationused by · Tokenization is the process of dividing text or other sequential input into discrete units called tokens for computational processing.

This explainer was generated by Manning's knowledge graph from the text of Authorization in Action. The section links point to the parts of the book it draws on.