How roles are stored on disk and what happens if user have 2 conflicting roles i.e. role A give access to DB1 and role B deny access on DB1
HI @rushabh02022002,
Keep in mind that the denying (blacklisting) will always win and in this case the User to whom that Role is assigned, will not have access to DB1.
What version of Neo4j?
However for v5, documentation at Managing privileges - Cypher Manual
states
The user will be able to access the resource if they have a GRANT (allowlist)
and do not have a DENY (denylist) relevant to that resource.
are you seeing where a user has both GRANT and DENY and the user is able to see data?