Developing a Secure API with NestJS

Hey guys I came here from the article as well. Interesting discussion.
I’m stuck on a part of the role concept; my app has a whole bunch of tenants and a user is supposed to have all kinds of permission for each tenant. So i could duplicate the roles and permissions for each tenant but that seems like a bad idea to me. I’m wondering if it’s possible at all to model permissions like that in auth0 or if I should save the data myself as it’s also possible to change it from within the app.

1 Like