Design a Permissions Service · System Design Interview

Design a Permissions ServiceDesign the service every other service asks before it acts: may this person do this to this object?What it has to do

Answer whether a subject may perform an action on an object

Grants are inherited — a folder’s reaches the files in it, a group’s reaches its members

A grant that is taken away stops being honoured

Scale

Checks per second: 10 million

Relationships stored: 50 billion

Subjects: 300 million

Out of scope

Authentication and sessions

The screen where access is granted

Audit reporting

Billing

LetsDiscuss

Loading your session…