Hierarchical Role Based Access Control for NodeJS