skill-auth-rbac

What problem does it solve?

Implementing scalable and precise access control across applications can be error-prone and hard to maintain. This skill provides a robust model for role-based and permission-based access control, including role hierarchies, resource permissions, guards, and policy patterns to standardize authorization decisions.

Core Features & Use Cases

• Role-based access control (RBAC) with hierarchical roles and inherited permissions
• Permission-based access control (PBAC) with granular action-resource scopes
• Guards for NestJS and middleware for Express to enforce authorization
• Database-backed permission modeling with migrations and clear policy patterns
• JWT-embedded roles with server-side permission resolution to keep tokens lean

Quick Start

Configure roles and permissions in your app and attach guards or middleware to enforce policy-based access control.