Backend Engineer
Changing one ID reveals another invoice.
- 1Your approach
- 2The follow-up
- 3Reflect & learn
THE INTERVIEWER ASKS
The scenario
An authenticated user requests an invoice by its ID. Which access checks should the API perform?
How would you approach it?
Explain your assumptions, your approach, and why you chose it.