BestHub
Sign in
Tagged articles

Data Permissions

8 articles · Page 1 of 1
Xiaolin Talks Programming
Xiaolin Talks Programming
Sep 20, 2026 · Backend Development

Why RBAC Isn't Enough: Building an ABAC Policy Engine with Spring Security

The article explains why RBAC fails for complex resource and context permissions, introduces ABAC with SpEL expressions, shows Spring Security integration via PermissionEvaluator, policy storage using SpEL strings, a deny-first policy engine, real-world scenarios (department orders, document visibility, time-based access), list permissions via SQL filtering, hot reload with Caffeine/Redis, and pitfalls like self-invocation and DB calls in policies.

ABACAttribute-Based Access ControlData Permissions
0 likes · 17 min read
Why RBAC Isn't Enough: Building an ABAC Policy Engine with Spring Security
Tech Ocean
Tech Ocean
Aug 9, 2026 · Information Security

A Complete Guide to Backend Access Control: RBAC, Dynamic Routing, and Data Permissions

The article dissects backend permission control by explaining RBAC fundamentals, illustrating how dynamic routing improves UI experience while backend authorization enforces security, detailing data‑scope enforcement, role inheritance limits, session handling, revocation mechanisms, and practical implementation steps with code examples and testing guidelines.

Access ControlBackend SecurityData Permissions
0 likes · 21 min read
A Complete Guide to Backend Access Control: RBAC, Dynamic Routing, and Data Permissions
Xiaolin Talks Programming
Xiaolin Talks Programming
Aug 3, 2026 · Backend Development

Dynamic Data Permissions in Spring Boot: Row/Column-Level Control with MyBatis-Plus

This article details a production-ready dynamic data permission system using Spring Boot 3.x and MyBatis-Plus 3.5+, covering row-level interception via JSqlParser, column-level masking with Jackson serialization, RBAC+ABAC hybrid model, two-level caching with Caffeine and Redis, and lessons learned from handling complex JOINs, hot updates, and performance overhead.

ABACCaffeine CacheColumn-Level Masking
0 likes · 18 min read
Dynamic Data Permissions in Spring Boot: Row/Column-Level Control with MyBatis-Plus
Architect
Architect
Oct 30, 2023 · Information Security

How DuoLiXiong Built a Scalable Multi‑Platform RBAC Permission System

This article walks through DuoLiXiong’s three‑layer business architecture, identifies the challenges of managing permissions across dozens of platforms, explains the RBAC fundamentals and four model variants, details the concrete database schema and tree‑structured permission design, and explores row‑ and column‑level data permissions with practical examples.

Access ControlBaiduData Permissions
0 likes · 18 min read
How DuoLiXiong Built a Scalable Multi‑Platform RBAC Permission System
Architecture Digest
Architecture Digest
Apr 5, 2023 · Information Security

Design and Implementation of a Role‑Based Access Control System for the DuoliXiong Business Platform

This article introduces the DuoliXiong local‑life service platform, analyzes the challenges of permission management across its multi‑layered architecture, and details the design of a flat RBAC model—including business‑line isolation, user, role, and permission tables, tree‑structured permission mapping, and data‑level access controls—to support scalable, secure operations.

Access ControlBusiness ArchitectureData Permissions
0 likes · 14 min read
Design and Implementation of a Role‑Based Access Control System for the DuoliXiong Business Platform
Architecture Digest
Architecture Digest
Jan 30, 2023 · Information Security

Design and Implementation of a Multi‑Platform RBAC Permission System for DuoliXiong Business

This article introduces the DuoliXiong local‑service platform, analyzes the challenges of its multi‑platform permission management, and details the design of a role‑based access control (RBAC) system—including model selection, database schema, tree‑structured permission representation, multi‑business‑line isolation, and data‑level (row/column) permissions—culminating in a scalable solution for complex B‑end and O‑end applications.

Access ControlData PermissionsRBAC
0 likes · 14 min read
Design and Implementation of a Multi‑Platform RBAC Permission System for DuoliXiong Business
NetEase Cloud Music Tech Team
NetEase Cloud Music Tech Team
Sep 24, 2020 · Information Security

Permission System Design and RBAC Implementation Practice in Backend Applications

The article explains permission system fundamentals, classifies page, function, and data permissions, compares DAC, MAC, RBAC, and ABAC models, details RBAC variants, and demonstrates a practical Egg framework plugin implementation that configures roles, resources, and data rules to achieve flexible, secure backend access control.

Access ControlBackend SecurityData Permissions
0 likes · 10 min read
Permission System Design and RBAC Implementation Practice in Backend Applications
Meituan Technology Team
Meituan Technology Team
Nov 2, 2017 · Big Data

Dashiang Cube: A Multi‑Source BI Reporting Tool with Custom Join Algorithms

Meituan‑Dianping’s Dashiang Cube is a multi‑source BI reporting platform that unifies MySQL, Kylin, Elasticsearch and plain‑text data via a common SQL layer, generates dialect‑specific queries, performs custom back‑tracking inner and left outer joins across heterogeneous sources, supports scripted metric calculations, permission controls, and a reusable UI component library for self‑service reporting.

BIData PermissionsJava
0 likes · 14 min read
Dashiang Cube: A Multi‑Source BI Reporting Tool with Custom Join Algorithms