Rbac Permissions Builder

This gives you the boilerplate for building role-based access control from scratch. You get permission enums, role-to-permission mappings, Express middleware for route guards, and policy classes for handling complex rules like resource ownership. The pattern is solid: check permissions at the route level, controller level, and expose them to your frontend so you can hide UI elements users can't access anyway. It includes the ownership checking pattern where users can edit their own stuff but admins can edit anything. If you're implementing "only admins can delete users" or "moderators can edit posts but not user accounts," this is the scaffolding you need without pulling in a full authorization library.

Install to Claude Code

npx -y skills add patricio0312rev/skills --skill rbac-permissions-builder --agent claude-code