What problem does it solve? Choosing and implementing the right authorization model is error-prone: teams over-engineer simple role checks with ReBAC, or force complex document-sharing graphs into plain RBAC, and often ship IDOR vulnerabilities by missing authorization middleware on endpoints. This Skill guides model selection, provides ready-to-use Postgres DDL, and audits existing code for privilege-escalation bugs. ## Core Features & Use Cases - Model Selection Guide: Decision table mapping scenarios to RBAC, ABAC, ReBAC, or hybrid models, with recommended stacks like OpenFGA, SpiceDB, Casbin, and Postgres RLS. - Schema Templates: Production-ready DDL for authz_roles, authz_role_assignments, authz_policies, and authz_audit_log tables with indexes and constraints. - Security Audit Checklists: Grep-based detection of missing authorization middleware, IDOR patterns, privilege-escalation paths, and JWT validation gaps. - Use Case: When a user asks to add Notion-style document sharing, the Skill recommends ReBAC, generates the relationship schema, and produces an audit checklist with regression tests. ## Quick Start Ask the assistant to design a permission system for your app, for example: design a role-based access control system with team workspaces and audit logging for my SaaS app.
