We had around 200 permissions stored in every user's Redis session.
The permissions were stored as plain-text strings, which meant every session was carrying more data than necessary.
We considered three approaches:
Numeric IDs: [0, 3, 22]
A bitmask: one bit per permission
A...