Design an authorization system
Design an authorization system using RBAC, ABAC, or ReBAC with a policy model, storage schema, and enforcement layer that allows adding permissions without deploys.
Preview
Copy prompt
Design a flexible and auditable authorisation system for [Application]. Compare three authorisation models: role-based access control (RBAC), attribute-based access control (ABAC), and relationship-based access control (ReBAC). Recommend the best fit for your use case. Design the policy model and its storage schema. Describe the enforcement layer and where policy decisions are evaluated. Show how a new permission can be introduced and assigned to a role without requiring a code deployment. Explain how to answer the audit question: which users currently have access to a given resource?
More
Architecture
Prompts
