Share a technical problem you've encountered and provide a detailed explanation of how you solved it.

Question

Share a technical problem you've encountered and provide a detailed explanation of how you solved it.

Asked at Google in the past year

221 views

Problem Solving category

Asked at

221 views

How to answer Problem Solving questions

Interview Guide

Top Problem Solving interview questions

Invite members
Invite by email

Add another

vparam · Answer 1 · 2024-05-29T20:05:33+0000

Prdouct description: This is product that allows migration of data from one platform to another. As the data that needs to be migrated / trasnfered between the platforms could be secure infroamtion which admins / other users cannot get auto permission, we need to make sure that:
- only users with permission can execute the migration
- post migration only the users that had permission continue to have the permission
Product attributes
- Store level permission
  - Admins - who have data store level permission but not to specific data set.
  - Users - who has only specific data set permission but cannot do anythign at store level
- RBAC permission
  - Power users - Who have entire CRUD permissions across all the data sets
  - Normal users - Who have CRUB only for the data they have created or given explicit permissions
  - Viewers - Who can view but not being able to create, update or delete the data they have access
Problem Statement: When migrating to a new platform there is a need to have both Admin and Power user permissions, so that the stoere attributes are created properly and all the data can be accessed and recreated in the new platform along with other RBAC roles being properly assigned.
Solution
- Create a feature that allows the admin to scan the power users whom they need to reach out to get the consent for being able to access the data
- Send a notification for getting consent from the power users
- Power users able to assign power user security role to Admin for a time period that gets revoked post that time.
- Admins get the power user role for all the data that they need to move and letting the power users know if they still do not have permission then the user will need to work with them to move the data
Validation
- Validate moving data for both data with access and without access toe nsure only specific data set can be moved
- Validate if the admin gets permission post the first migration then they can still move only the data that need to move and not that was already moved.
- Validate if the power user can move the data by themseleves with the adupport from admin based on the store level settings that was already configured by the admin
Trade offs
- Long migration duration - Getting the permissions and then moving the data could be a long process as it depends on when the power users consents
- Syncing the data post initial cutover could be complex and all scenarios might not be covered
- revoking admin sof pwer user rights could sometime not work based on identity system RBAC implementation.