https://www.somethingsblog.com/2024/10/21/node-js-access-control-implementing-rbac-and-abac/