The original title is: "Hierarchical RBAC in Node.js — without deploying OpenFGA"

Short summary

nested-rbac solves hierarchical authorization in multi-tenant SaaS without deploying OpenFGA or SpiceDB. Roles granted at the org level cascade to child resources through ancestor chain traversal. Lightweight npm package with Express middleware, open source, and full TypeScript support.

• •Role inheritance cascades from organization down to individual tasks/resources without separate FGA service
• •Lightweight npm package with Express middleware; no operational overhead of OpenFGA/SpiceDB deployment
• •Open source with TypeScript types and comprehensive test suite; fills the mid-market gap between flat RBAC and complex FGA engines

Generated with AI, which can make mistakes.