Access Control Rbac

This is a solid foundation for implementing role based access control in your app. You get working examples in Node.js, Python, and Java Spring Security, covering both traditional RBAC and attribute based access control. The code shows permission classes, role hierarchies, and policy evaluation logic you can adapt. Honestly, the examples are educational but you'll need to extend them significantly for production use, especially around persistence, caching, and integration with your auth system. Best suited for teams building their first serious authorization layer or migrating from ad hoc permission checks to something structured. The best practices section is actually useful, emphasizing least privilege and avoiding role explosion.

skills.sh installs: 763
GitHub stars: 379
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add aj-geddes/useful-ai-prompts --skill access-control-rbac --agent claude-code

Installs into .claude/skills of the current project.

Files

Overview

Implement comprehensive Role-Based Access Control systems with permissions management, attribute-based policies, and least privilege principles.

When to Use

Multi-tenant applications
Enterprise access management
API authorization
Admin dashboards
Data access controls
Compliance requirements

Quick Start

Minimal working example:

// rbac-system.js
class Permission {
  constructor(resource, action) {
    this.resource = resource;
    this.action = action;
  }

  toString() {
    return `${this.resource}:${this.action}`;
  }
}

class Role {
  constructor(name, description) {
    this.name = name;
    this.description = description;
    this.permissions = new Set();
    this.inherits = new Set();
  }

  addPermission(permission) {
    this.permissions.add(permission.toString());
  }

  removePermission(permission) {
// ... (see reference guides for full implementation)