How do you design permissions for a multi-tenant SaaS product?
I’ve been thinking a lot recently while working on migrating the Role and Permission System of our organization-based SaaS product to a more scalable authorization architecture. Our product has multiple roles, different permissions, and different data scopes depending on the user and organization. As the system grows, simply adding more roles and if conditions across endpoints quickly becomes…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.
