Build an RBAC Engine

role inheritance and explicit deny

Challenge 2 of Platform EngineeringIntermediate~45 min

Build the authorization engine behind every admin panel: roles that grant permissions, users assigned roles, role inheritance so an admin gets an editor's rights, wildcard permissions like `doc:*`, and explicit per-user denies that override everything.

5 steps

1. 1Roles and Permissions
2. 2Assigning Roles to Users
3. 3Role Inheritance
4. 4Wildcard Permissions
5. 5Explicit Denies