Roles and permissions

Every member has one role, and a role is a set of permissions.

const { has } = await auth();
if (!has({ permission: "billing:manage" })) return new Response("Forbidden", { status: 403 });