Add Role Permissions Automatically

The problem

Manually implementing RBAC is error-prone and tedious. Developers often struggle to integrate role checks into existing middleware without breaking authentication or creating security holes.

What it does

• Detects existing authentication systems and user models automatically.
• Injects role-based access control (RBAC) into existing routes and API endpoints.
• Generates custom authorization middleware or guards following project conventions.
• Updates database schemas and config files to support permission levels.
• Verifies security changes by running type checks and existing test suites.

Frameworks & tools

Works with any Node.js, Python, or Go web framework. Handles Express, FastAPI, NestJS, and common ORMs like Prisma or SQLAlchemy.

Why this beats prompting it yourself

Generic prompts often hallucinate security patterns that don't match your specific auth stack. This skill performs a deep-file inspection first, ensuring new permission logic respects your existing middleware and naming conventions without weakening security.

Use cases

• Locking down an admin dashboard to specific user roles.
• Adding a 'moderator' tier to an existing community platform.
• Restricting sensitive API endpoints to authenticated owners only.
• Scaffolding a least-privilege permission system for a new MVP.

Known limitations

Will not perform destructive database migrations or bypass existing auth. Requires an existing project structure to detect conventions.