Google Interview Question

How will you assign ACLs to users or groups? Theoritical discussion no code required.