secondsky avatar

Access Control Rbac

This is a solid foundation for building permission systems. You get working implementations of RBAC with role inheritance in Node.js, ABAC with policy evaluation in Python, and pointers to Spring Security patterns for Java. The comparison table of different access control models (RBAC, ABAC, MAC, DAC, ReBAC) is genuinely helpful when you're deciding which approach fits your needs. The Express middleware example shows exactly how to gate routes with permission checks. What I appreciate is that it doesn't oversimplify. Real access control gets messy with role hierarchies and policy conflicts, and this at least acknowledges that complexity while giving you patterns that scale beyond toy examples.

skills.sh installs
381
GitHub stars
248
last updated
Aug 21, 2026

Install

$ npx -y skills add secondsky/claude-skills --skill access-control-rbac --agent claude-code

Installs into .claude/skills of the current project.

Files

This is a solid foundation for building permission systems. You get working implementations of RBAC with role inheritance in Node.js, ABAC with policy evaluation in Python, and pointers to Spring Security patterns for Java. The comparison table of different access control models (RBAC, ABAC, MAC, DAC, ReBAC) is genuinely helpful when you're deciding which approach fits your needs. The Express middleware example shows exactly how to gate routes with permission checks. What I appreciate is that it doesn't oversimplify. Real access control gets messy with role hierarchies and policy conflicts, and this at least acknowledges that complexity while giving you patterns that scale beyond toy examples.

Browse the repository on GitHub

Sponsors

Details

Repository
github.com/secondsky/claude-skills
Category
Security
First seen
Jun 3, 2026

More from secondsky/claude-skills

All 146

Recommended

More Security
1decebals avatarsecurity-auditdecebals/claude-code-javaJava security checklist covering OWASP Top 10, input validation, injection prevention, and secure coding. Works with Spring, Quarkus, Jakarta EE, and plain Java347skills.sh installs
2patricio0312rev avatarapi-security-hardenerpatricio0312rev/skillsHardens API security with rate limiting, input validation, authentication, and protection against common attacks. Use when users request "API security", "secure284skills.sh installs
3personamanagmentlayer avatarsecurity-expertpersonamanagmentlayer/pclExpert-level application security, OWASP Top 10, penetration testing, and security best practices228skills.sh installs
4harperaa avatarsecurity-testing-verificationharperaa/secure-claude-skillsTest security features and verify implementation before deployment. Use this skill when you need to test CSRF protection, rate limiting, input validation, verif198skills.sh installs
5harperaa avatarinput-validation-xss-preventionharperaa/secure-claude-skillsValidate and sanitize user input to prevent XSS, injection attacks, and ensure data quality. Use this skill when you need to validate forms, sanitize user input197skills.sh installs
6proffesor-for-testing avatarn8n-security-testingproffesor-for-testing/agentic-qeCredential exposure detection, OAuth flow validation, API key management testing, and data sanitization verification for n8n workflows. Use when validating n8n 172skills.sh installs