RBAC in Go — From a Hand-Rolled Approach to Casbin

From simple role checks to policy-driven authorization — and knowing when each one is enough.