Some summary of permission management

I have worked on many products and systems. Because they often involve the issue of permission management, I have made some summaries.

A few years ago, I worked on a large trading platform (a platform of a large Internet company). At that time, I referred to the six-household model (accounts, users, customers, and individuals and enterprises respectively).

This is a relatively large and complex thing. As a minimalist, I don’t like it very much, but for many scenes, this model does have advantages.

So, later, based on my own experience and referring to the six-household model, I summarized three permission management systems.

1. Role authority system

This is the most common.

Roles determine permissions. To obtain the corresponding permissions, you only need to become a corresponding role.

2. Order authority system

Permissions are determined by orders. To obtain the corresponding permissions, just purchase the corresponding products.

3. Asset authority system

The amount of a certain asset determines the authority. To obtain the corresponding authority, you only need to own/accumulate a certain asset to a certain extent.

Regarding user assets: points, balances, coupons, rebates, etc. can be collectively referred to as user assets.