Role-based access control for mongoose apps.