16
How would you design a permission system for a large application?
Tap to write answer
0 words | 0 charsPress Enter ↵ to reveal
Your Attempt
0 wordsRefined Model Answer
ReferenceBefore designing it, I would clarify whether permissions are role-based, resource-based, or both. My default approach would be to use a combination of roles, groups, and fine-grained access checks so the system stays flexible as the product grows. I would keep authorization logic separate from the business logic so permissions are easier to audit and change. The trade-off is between simplicity and control, and at scale I would usually prefer a clear policy layer rather than scattering checks across the codebase. I would also think about caching permission decisions, revocation speed, and audit logging.