Hierarchical Role Based Access Control for your mongoose models