Loading...
Loading...
Browse 5 real-world technical and behavioral interview questions about Access control. Review scenarios, edge cases, and architectural best practices.
Treat it as a confirmed breach until proven otherwise: preserve logs, scope who saw what, and start the disclosure clock alongside the investigation. The cause is almost always tenant scoping living in application code, where one forgotten filter leaks everything - so move enforcement below the code, to row-level security.
Entitlements change through deployment paths that no access review inspects, so the only reliable detection is a snapshot of effective permissions diffed on every release, with the diff cleared by someone who did not ship it.
You need a purpose-built audit trail, not application logs: guaranteed-capture, append-only records of actor, subject identifier, action, server time, outcome and stated purpose, made tamper-evident by hash chaining and anchored write-only storage, and held where whoever can change the data cannot change its record. It also connects access control to the point an interviewer is testing.
Each chunk needs its source document and version, its section path, an anchor precise enough to open, effective and ingestion dates, and the permission set that governed the original — because filtering, citation, freshness and access control are all served from metadata rather than from the vector.
Role-based access permits this by design, so the control cannot be authorisation alone. You need a recorded relationship between clinician and patient, a break-glass path that costs something to use, read events in the audit log, and someone whose job is to review the exceptions.