I have many modules and sub modules and different Permissions for Different Roles User Groups.
On a architecture level of this application i want to apply Authorisation efficiently, so at any scale there will be minimal changes.
So thinking of managing in DB. also permission need to check on every api.
So if i check permission of user from DB on every API is not a good idea. Que - 1 I can save on session or redis. (Or any other way ?).
Also , how can i create DB architecture (tables and references)
And also how can i manage permission at backend level . Because front end also need to know that what should be visible to particular User on basis of its permission level.
Que - n I have example like AWS, which manages Policy and also Groups and Roles. So if you also can summarise related to their architecture will also helpful.