rbac

Hierarchical Role-Based Access Control for Node.js. Maintained by phellipeandrade on GitHub, where it has earned 283 stars from the community.

It's actively developed around acl, authorization, express, and is a solid reference for anyone building with these tools.