RBAC
Design and operate ZopNight's RBAC: 15 policy entities, 3 system roles, custom roles, team-scoped access.
6 lessons.
Read in order, or jump to what you need.
The policy table
By the end of this lesson, you will be able to identify the 15 entities in ZopNight's RBAC policy table, map any product surface to the policy it enforces, and explain why the gateway is the…
System roles: Viewer, Editor, Admin, SuperAdmin
By the end of this lesson, you will be able to describe the four system roles, match a job function to the right system role, and recognize when a system role does not fit and a custom role is…
Custom roles
By the end of this lesson, you will be able to decide when a custom role is justified, design a custom role from the-entity policy table, and avoid the common anti-patterns that turn custom…
Team-scoped access
By the end of this lesson, you will be able to configure team-scoped access using the allResources and resourceIds fields, distinguish team scoping from role scoping, and reason about the…
The three-state scope model
By the end of this lesson, you will be able to predict the query behavior of each scope state , explain why the empty state is a distinct concept rather than a degenerate case, and identify which…
Frontend gating with usePermission()
By the end of this lesson, you will be able to recognize how ZopNight's frontend gates UI based on RBAC, distinguish the frontend gate from the gateway check , and reason about what happens when…