Skill UI

This skill guides the implementation of enterprise-grade Role-Based Access Control (RBAC) for Shopify Plus applications. It covers integrating fine-grained staff permissions, managing multi-location inventory access, and utilizing the Shopify Organization API for centralized multi-store governance. This is essential for building complex, secure SaaS solutions that require granular, per-staff, and organization-wide permission management.

This comprehensive guide details how to implement robust data governance and privacy controls within Snowflake. Learn to apply column-level masking policies, row access policies, and object tagging to secure PII data. It provides practical SQL examples for achieving GDPR/CCPA compliance, managing data subject rights (access, erasure, rectification), and setting up automated data retention tasks.

This comprehensive guide details how to set up robust, isolated, and secure development, staging, and production environments within Snowflake. It utilizes best practices like zero-copy cloning for efficient data replication, implements granular Role-Based Access Control (RBAC), and defines environment-specific compute resources (warehouses) and data masking policies. This ensures data integrity, compliance, and cost optimization across all stages of the data lifecycle.

This skill provides comprehensive guidance on implementing robust data governance and security guardrails within Snowflake. It covers advanced features such as network rules, mandatory authentication policies (MFA, Key Pair), session timeouts, and statement-level controls. Use this when enforcing strict security policies, achieving regulatory compliance, or structuring robust data access controls for a Snowflake environment.

This skill provides enterprise-grade Role-Based Access Control (RBAC) patterns specifically for Veeva Vault deployments in regulated environments. It guides developers on implementing advanced features while maintaining strict compliance standards. Key considerations include validating API changes against compliance requirements, utilizing VQL for efficient data retrieval, and managing security profiles for robust access control.

Provides an enterprise-grade framework for managing Webflow access control using OAuth 2.0 and scope-based Role-Based Access Control (RBAC). This system enforces the principle of least privilege by mapping specific user roles (e.g., Viewer, Editor, Admin) to granular Webflow scopes. Key features include per-site token isolation and robust permission checking middleware, significantly enhancing security for complex SaaS integrations.

This skill provides a robust, schema-driven solution for managing and enforcing permissions in administrative user interfaces. It allows developers to define complex permission structures (the domain schema) and automatically generates associated UI forms, injectable permission checks, and component props. Use it to add granular permission controls to any admin section, supporting multi-entity, complex access scopes (e.g., full/own), and various operational actions.

This catalog provides core abstractions and hooks for robust security management in administrative applications. It includes essential tools for handling identity context, user authentication flows (login/logout), and granular authorization checks. Developers can use these components to build secure, feature-rich administrative panels with reliable access control.

This skill provides a robust, schema-based system for handling API authorization and access control. It enables developers to define detailed permission schemas (the domain layer) and create injectable, type-safe permissions abstractions (the feature layer). Use this system when implementing complex access control logic, checking granular read/write/delete permissions, or enforcing resource ownership scoping (`own` records) across API use cases.

A comprehensive playbook for bypassing 401/403 Forbidden errors. Covers advanced techniques like path normalization tricks (encoding, traversal), HTTP method tampering, IP spoofing headers, and protocol downgrade attacks. Essential knowledge for penetration testing and security auditing.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.

A comprehensive playbook covering advanced smart contract audit techniques for Solidity/EVM. Focuses on critical patterns like reentrancy (cross-contract), integer overflows, access control misuse, delegatecall exploits, flash loans, and advanced MEV/front-running attacks. Essential for securing DeFi protocols.