Site footer

Start a project — engagements from $5,000+

Initialize engagement

Sharif Mohammad NasrullahFull-Stack Web & AI Application Architect

Enterprise-grade SaaS platforms, from architecture to deployment. Budget-qualified engagements only.

Available · 2 slots · Q1 2025

Navigate

Work
Showcases
Services
Writing
About

Engage

Start a Project
Sign Guestbook
Client Portals
Uses
API Docs
RSS Feed
System Status
Privacy Policy

Direct

hello@sharif.dev
GitHub
X / Twitter
LinkedIn

built_withNext.js 16TypeScriptTailwind v4PrismaPostgreSQLDockerCoolifyCaddy

top

Writing
Security

Security6 min read·Jan 22, 2026·7 views

RBAC Without the Framework Tax: A Pragmatic NextAuth Pattern

How to enforce role-based access at the route boundary without bloating every handler with permission checks.

Table of contents

Enforce Once, Trust Everywhere

On this page

Enforce Once, Trust Everywhere

TagsNextAuthRBACSecurity

OlderSelf-Hosting in 2026: Why I Chose Coolify Over Kubernetes NewerArchitecting for Series A: When Your MVP Has to Become a Platform

Mentions

Related case studies

HealthTech / Telemedicine

Meridian Health — HIPAA-Aligned Patient Portal

Built a HIPAA-aligned patient portal with role-based access, audit logging, and cryptographic certificate issuance for 14 clinics.

NextAuth

Read case study

Get the next essay

Notes on architecture, scaling, and the discipline of shipping enterprise software. One email per essay — no schedule, no spam.

Join the list. Unsubscribe with one click.

More writing

Written by

Sharif Mohammad Nasrullah

Full-Stack Web & AI Application Architect

The short version I am Sharif Mohammad Nasrullah — a FullStack Web & AI Application Architect. Over the last several years I have designed, built, and deployed highperformance Next.js applications and…

More about Sharif