Access Control

Not all users are admins.

The RBAC Node

Route based on user identity.

1. Start: userid = input.user_id
2. Lookup: roles = get_roles(userid)
3. Router:
   • If "admin" in roles -> Enable DeleteNode path.
   • Else -> Block path.

The graph topology enables you to physically separate "Admin Actions" from "User Actions" into different branches that regular users literally cannot reach.