Permission Systems for Enterprise That Scale

(eliocapella.com)

15 points | by eliocs 3 hours ago

4 comments

  • tekkk 12 minutes ago
    Strange the article proposes itself for "Enterprise" yet has no mention of Google's Zanzibar and how it compares to the other approaches. AFAIK it doesn't use pre-computed values but just queries really fast (using Spanner so there's that)
  • charcircuit 1 hour ago
    >We added a point of failure, as the permissions table can get out of sync with the actual data.

    >The main risk with pre-computed permissions is data getting out of sync.

    It would make sense to have permissions be a first class concept for databases and to ensure such a desync could never happen. Data being only read or written from specific users is a very common thing for data so it would be worth having first class support for it.

  • bencyoung 1 hour ago
    If you're using Postgres then using the ltree module is great for permission systems. Available in RDS too
    • casper14 2 minutes ago
      Could you explain why this is great over alternatives?