
Multi-tenancy by construction, Part 6: Permissions in code, roles in data
A small authorisation model that lets tenants define their own roles without a code change: permission strings owned by services, roles as data, and a resource-aware check you can grow into.

