Permission Systems for Enterprise That Scale

(eliocapella.com)

18 points | by eliocs 4 hours ago ago

7 comments

  • tekkk an hour ago

    Strange the article proposes itself for "Enterprise" yet has no mention of Google's Zanzibar and how it compares to the other approaches. AFAIK it doesn't use pre-computed values but just queries really fast (using Spanner so there's that)

  • charcircuit 2 hours ago

    >We added a point of failure, as the permissions table can get out of sync with the actual data.

    >The main risk with pre-computed permissions is data getting out of sync.

    It would make sense to have permissions be a first class concept for databases and to ensure such a desync could never happen. Data being only read or written from specific users is a very common thing for data so it would be worth having first class support for it.

    • valiant55 3 minutes ago

      I'm struggling to understand what the issue that the author is getting at. The point of a database is that it's ACID compliant, wrap insets/updates/deletes in a transaction and no such drift would occur. What am I missing?

  • bencyoung 3 hours ago

    If you're using Postgres then using the ltree module is great for permission systems. Available in RDS too

    • nh2 3 minutes ago

      Do you have an article about that?

    • casper14 an hour ago

      Could you explain why this is great over alternatives?