Skip to main content

Story 2.3: Core RBAC Engine

FieldValue
Story Points13
SprintSprint 4-5

User Story​

As a Developer
I want a centralized RBAC engine
So that all services can enforce consistent access control

Key Features​

  • Permission checking with <5ms latency (cached)
  • Role hierarchy support (inherits parent permissions)
  • Module + Action + Data level checks
  • Wildcard permissions (fee.* = all fee actions)
  • Permission caching with Redis
  • gRPC interface for microservices