vernal hedge
I'd like to start using roles for authorization, the first use case being employees and admin, where with the default Payload security provided by the Payload website template I only have admin and public, and this only covers admin.
Gemini suggests just adding a roles array field to my users collection and using an enhanced copy of the basic, template provided authenticated function that also checks the roles field.
This is delightfully simple and I would like to go with this approach, but I'd also eventually be able to extend these auth checks to the non-admin frontend, with, say some routes only available to users with an employee role, so I wanted to check with the experts here if there are any caveats that might apply here.
dusk drum
desert walrus
