rbac-validator

Enforce four-tier RBAC across NABIP AMS with UI gating, API route protection, and Row-Level Security policies.

Updated Nov 15, 2025
One-click install
npx skills add https://github.com/markus41/nabip-association-ma --skill rbac-validator
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: rbac-validator
Source: https://github.com/markus41/nabip-association-ma/tree/main/.claude/skills/rbac-validator
Command: npx skills add https://github.com/markus41/nabip-association-ma --skill rbac-validator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

RBAC-validation and enforcement for four-tier access across NABIP AMS to prevent unauthorized data access and to support scalable governance.

Core Features & Use Cases

  • Role definitions for Member, Chapter Admin, State Admin, and National Admin.
  • UI gating, API route protection, and database policy guidance (RLS) for multi-tenant data.
  • Audit logging patterns and secure role-management workflows.

Quick Start

Install or integrate the RBAC patterns into your API routes and UI components, define roles and data scopes, and apply RLS policies; enable audit logging for privileged actions.

Frequently Asked Questions about rbac-validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement multi-tenant row-level security policies in Supabase?

Multi-tenant row-level security policies in Supabase are implemented by defining role-based data scopes for member, chapter, state, and national admin tiers. This skill provides SQL policy examples to restrict unauthorized data access across tenant boundaries.

What is the best way to structure four-tier role-based access control for a member organization?

Four-tier role-based access control for member organizations is structured by defining hierarchical roles: member, chapter admin, state admin, and national admin. This approach ensures scalable governance by mapping specific data scopes and permissions to each administrative level.

How do I protect API routes with RBAC authorization in TypeScript?

API routes are protected with RBAC authorization in TypeScript by applying role-based interfaces that validate user permissions before processing requests. This skill includes TypeScript interfaces and route protection patterns to enforce access control securely.

Does this RBAC pattern support audit logging for privileged actions?

Yes, this RBAC pattern supports audit logging for privileged actions by providing dedicated logging workflows. It includes specific patterns to track role-management operations and administrative access, satisfying governance and compliance requirements.

Can I use these RBAC patterns for UI gating in a multi-tenant application?

Yes, you can use these RBAC patterns for UI gating in a multi-tenant application. The skill provides guidance on conditionally rendering UI components based on the four-tier role hierarchy, ensuring users only see accessible features.