Role-based access control (RBAC) for We.js framework