Enforce multi-tenant role-based permissions in Wasp applications.
npx skills add https://github.com/ToonVos/empty-opensaas --skill permissions-toonvos
Please help me install this Agent Skill. Skill: permissions Source: https://github.com/ToonVos/empty-opensaas/tree/main/.claude/skills/permissions Command: npx skills add https://github.com/ToonVos/empty-opensaas --skill permissions-toonvos
This Skill provides a robust framework for implementing multi-tenant permission checking and role-based access control in Wasp applications. It eliminates the complexity of securing data across organizations and departments, preventing data leaks and unauthorized access.
getDocument operation. This Skill will guide you to ensure only users with MEMBER or MANAGER role in the document's department can access it, and that organization OWNERs or ADMINs have full access.Implement a permission check for the getDocument operation. Ensure only users with MEMBER or MANAGER role in the document's department can access it.
High-intent search queries and answers about installing and using this skill.
Role-based access control in Wasp uses hierarchical roles—OWNER, ADMIN, MANAGER, MEMBER, VIEWER—defined at organization and department levels. This Skill provides helper functions like getUserOrgRole and getUserRoleInDepartment to check permissions server-side before executing operations, preventing unauthorized access across tenant boundaries.
Enforce multi-tenant permission validation at the operation level using helper functions such as canAccessOrganization, canAccessDepartment, and canAccessDocument. This Skill guides integrating these checks into Wasp operations with proper HTTP status codes (401, 403, 404) to ensure data filtering and secure isolation.
Use the canAccessDocument helper function, which validates that the user holds MEMBER or MANAGER role in the document's department, or OWNER/ADMIN role in the organization. This Skill provides the framework to implement granular resource-level access checks within Wasp operations.
Yes. This Skill supports hierarchical department structures where organization-level admins inherit broader access, while department-level roles restrict access granularly. It provides functions to traverse and validate permissions across department hierarchies in multi-tenant Wasp applications.
No. This Skill provides specialized helper functions—isOrgAdmin for organization-level checks and getUserRoleInDepartment for department-level validation—eliminating redundant authorization logic while maintaining clear separation of concerns in Wasp operations.
spoonboboManages Trinity AGI authentication and RBAC with JWTs and audit logging.
luokai25Configure role-based access control and member management for Better Auth organizations.
AgentiveCityImplement JWT authentication and role-based authorization for Hono backends.
techwithanirudhConfigure and manage multi-tenant organizations with RBAC, teams, and invitations in Better Auth's organization plugin.