Group/rule-based authorization approach in node.js and express.js

Question

What are good strategies for role-based authorization in express.js? Especially with express-resource?

With Express-resource there are no handlers, so I think there are

Answer 1

I wrote a module as non-explicit routing middleware. Works well with express-routes.

Gandalf on GitHub