- Roles Based Access Control to be added - Make the roles and permissions easily configurable - Each role will consist of a list of permissions - Controllers will have decorators that work on permissions rather than roles - For the sake of boilerplate - lets have roles -> admin, user - Permissions to be -> ControllerGetAccess, ControllerPostAccess, ControllerPutAccess - Admin will have all the permissions, whereas user will only have the ControllerGetAccess
