Design and implement RBAC V2, a flexible and secure roles & permissions system replacing hard-coded roles with a tenant-configurable architecture for multi-tenant SaaS.
Responsibilities:
- Design a tenant-specific RBAC data model
- Define fine-grained permissions across modules
- Support multi-role users with clear conflict-resolution rules
- Build backend authorization middleware for API routes
- Create an admin UI for roles, permissions, and assignments
- Implement strong security with server-side checks + RLS
- Provide migration scripts from the old role system
Technologies:
- TypeScript, Next.js/React
- Supabase Postgres
- Row-Level Security (RLS)
- Server-side authorization middleware
- SQL schema design & migrations
Notes: 1 trainee.