blog

Writing

Notes on software engineering, the things I build, and what I learn along the way.

• 24 Sept 2026

  Extending ASP.NET Identity for fine-grained permission control

  ASP.NET Identity gives you roles and stops there. How MyPortal got per-action permissions without registering a policy for each one — and why none of them live in the token.

  • .net
  • security
  • architecture
• 14 Jul 2026

  A database that pretends to be a disk: building a virtual filesystem with Dokan

  Why we built our own database-backed Windows filesystem for legal documents, how a user-mode driver made it possible, and the war stories — including Microsoft Office — along the way.

  • systems
  • .net
  • windows
  • war-story