## Problem Implement a role-based access control (RBAC) system where roles can inherit permissions from parent roles. Given a user's assigned roles, determine whether they are authorized for a given action on a resource. ```python class RBACSystem: def add_role(self, role: str, parent: str = None) -> None: ... def grant(self, role: str, action: str, resource: str) -> None: ... def assign_role(self, user_id: str, role: str) -> None: ... def can(self, user_id: str, action: str, resource: str) -> bool: ... ``` **Example:** ``` add_role("editor", parent="viewer") grant("viewer", "read", "article") grant("editor", "write", "article") assign_role("alice", "editor") can("alice", "read", "article") -> True (inherited) can("alice", "delete", "article") -> False ``` ## Follow-ups 1. How do you detect and prevent circular role inheritance? 2. If a user has two roles and one explicitly denies an action, should deny override allow? 3. How would you support resource wildcards, e.g. `can(user, "read", "article:*")`? 4. How would you audit all permissions a user has at a given point in time?

InterviewDB Question

User Permissions: Design a Role-Based Access Control System with Inheritance

phone

Question Details

Problem Implement a role-based access control (RBAC) system where roles can inherit permissions from parent roles. Given a user's assigned roles, determine whether they are authorized for a given action on a resource. Example: Follow-ups How do you detect and prevent circular role inheritance? If a user has two roles and one explicitly denies an action, should deny override allow? How would you support resource wildcards, e.g. can(user, "read", "article:*")? How would you audit all permissions a…

Full Details

🔒

Unlock all Notion questions

Full insider details, leaked discussions, and candidate experiences.

Get full access — $100 a year, unlimited access

About This Question

This is a reported interview question from a notion interview during the phone round.

It covers the following topics: Coding, Phone .

Topics

Coding Phone

User Permissions: Design a Role-Based Access Control System with Inheritance

Question Details

Full Details

About This Question

Topics

More Notion Interview Questions