Hierarchical RBAC in Node.js — without deploying OpenFGA

Almost every SaaS app has the same shape:

organization → team → project → resource

Enter fullscreen mode

Exit fullscreen mode

And almost every one hits the same authorization wall: if I make someone an admin of