Skip to main content

RBAC built-in

Four roles. Every endpoint gated. UI mirrors server.

Owner / Admin / Operator / Viewer. Backend enforces on every mutating endpoint. useCan(slug, action) hook mirrors the policy in the dashboard so users never see buttons that would 403. RoleBadge chips on Members; /settings/memberships shows everyone their role at a glance.

Preview
z4j dashboard - RBAC built-in
Memberships Project: billing-prod AC Alice Chen [email protected] Owner BM Bob Martinez [email protected] Admin CS Carlos Silva [email protected] Operator DP Diana Park [email protected] Operator EN Evan Nakamura [email protected] Viewer

Mockup of the dashboard view for this feature. Live-reloading and themed to match your dashboard.

Ships with

  • Backend as source of truth
  • UI gates match server policy
  • Debounced 'Permission denied' toast on any 403
  • Per-project membership + last-admin protection
Related

More capabilities