#access control

9 access control interview questions, asked at Anthropic, Decagon, Google and 6 more companies. Last asked Sep 2026.

Effective privileges in a role hierarchy with allow and disallow listsCodingYou are building the access-control layer of a data platform. Every role has: - allowed: privileges granted directly to the role - disallowed: privileges explicitly taken away…
Last asked Sep 2026
Design the security architecture for an LLM chatbotAI system designA company runs a customer-facing chatbot built on a language model. Design its security: protecting the bot from abuse and prompt injection, limiting the data it can see and the…
Last asked Sep 2026
Data platform with ingestion and governed accessSystem designDesign a system that ingests large-scale data, processes it, and serves stakeholders with different access needs and sensitivities.
Last asked Sep 2026
Document store with drive sync and org ACLsSystem designDesign a Drive-like document store with upload and download, large-file handling and organization-level access control; real-time multi-device sync is out of scope. Reported on…
Last asked Sep 2026
Model access permissions in a graph database and migrate to itSystem designDesign how to store which users can access which resources in a graph database, and how to answer access questions from it. The data lives in an existing database today, so the…
Last asked Jul 2026
Design a text-to-SQL chatbot with access controlAI system designDesign a chatbot that turns questions into SQL over internal data. Make sure users only reach data they are allowed to see, and stop invented tables, unsafe statements and runaway…
Last asked Jul 2026
Design post privacy and visibility controlsSystem designDesign privacy settings for posts on a social network: an author chooses who can see each post (public, friends, friends of friends, custom lists, excluding certain people), and…
Last asked Feb 2026
Design a key management serviceSystem designDesign a service that creates, stores and rotates encryption keys for other services and performs encrypt and decrypt calls for them. Cover how master keys are protected (hardware…
Last asked Sep 2025
Page permission managementCodingImplement page-level permissions: grant and revoke access for users on pages, and answer whether a user can view or edit a page, respecting the page hierarchy. Reported on…