Attribute based access control for Node.js.