Make a RBAC & ABAC hybrid authorization middleware for Blitz, see: https://github.com/blitz-js/blitz/discussions/2116 Some other materials: https://blitzjs.com/docs/authorization