Coding (Platform)

NestJS: Enforce permission rules for billing module access policy

A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is billing module.

Repair the billing module access policy implementation so it returns only permitted actions and explicit denial reasons.

Evidence

Affected surface: NestJS / billing module.
Observed failure family: enforce permission rules.
Scope policy: tenantId must equal tenant-primary.

What this task practices

This coding (platform) exercise trains the same sequence expected in an interview: understand the prompt, make assumptions explicit, produce a concrete answer, and explain the decisions behind it. The task is marked medium difficulty. The private workspace adds the tools required by this round, such as recording, code execution, diagrams, evidence panels, or structured notes. It also preserves the attempt so later feedback can be compared with previous work. Evaluation is based on task-specific criteria and the candidate seniority selected in the preparation path. Public pages never expose the reference solution, hidden tests, evaluator instructions, or another candidate’s work.