Hierarchical RBAC in Node.js — without deploying OpenFGA
6.8 relevance
Score Breakdown
technical depth 8
novelty 6
actionability 8
community 5
strategic 4
personal 7
Scored daily by a customisable AI persona to surface the most relevant engineering leadership news.
Practical RBAC pattern without external dependencies, useful for SaaS apps.
Summary
nested-rbac is a new dependency-free, TypeScript-first library that brings Zanzibar-style hierarchical RBAC to Node.js without deploying a separate service like OpenFGA. It resolves role inheritance by having the caller provide the ancestor chain (e.g., project→team→organization), then evaluating permissions against the target and all ancestors with support for wildcards, deny rules, and ad-hoc grants. This fills the gap between flat RBAC libraries and heavyweight FGA engines, giving SaaS apps zero-infrastructure role inheritance for resource trees.