We use an in-house deployment service system we built called Teletraan to push new code to Pinners around the world. Our goal for Teletraan is to be as dependable and straightforward as possible to remove any deploy-related issues for engineers. In order to achieve this, we’ve put great effort into keeping our deploy process and system secure.
Before, Teletraan didn’t have native authentication and authorization checks when performing operations, so our products and internal tools were at risk for unintended deploy-related changes across teams. As we continue to quickly grow as an organization, it’s important to have a robust permissions control mechanism to prevent possible poor experiences for Pinners and for our productivity as engineers.
Role-based permissions and access control lists
At Pinterest, …
[Read more]