https://mytecharm.com.co/post/role-based-access-control-in-nodejs-beyond-simple-middleware-id6k6j