Who can access what?
Illustrative engineering example. Sources and findings are fictional.
adminwritereadnoneunknown
Permission register
| Resource | Role | Permission | Evidence |
|---|---|---|---|
| Orders table | Operations | admin: DB owner | Illustrative policy: ops/orders |
| Orders table | Order worker | write: SELECT / UPDATE | Illustrative policy: writer/orders |
| Orders table | Analytics | read: SELECT | Illustrative policy: reader/orders |
| Event stream | Operations | admin: Manage topics | Illustrative policy: ops/events |
| Event stream | Order worker | write: Publish | Illustrative policy: writer/events |
| Event stream | Analytics | read: Subscribe | Illustrative policy: reader/events |
| Audit log | Operations | read: Read | Illustrative policy: ops/audit |
| Audit log | Order worker | write: Append | Illustrative policy: writer/audit |
| Audit log | Analytics | none: Explicit deny | Illustrative policy: reader/audit |
| Secret store | Operations | read: Read | Illustrative policy: ops/secrets |
| Secret store | Order worker | unknown: Unknown | No permission evidence supplied. |
| Secret store | Analytics | none: Explicit deny | Illustrative policy: reader/secrets |