Backbone by-Role access concept

controller.js

var can = Backbone.Role.can;

var EntitiesController = Backbone.Controller.extend({
  before: {
    index: function() {
      return can('read', 'entities');
    }
  }
});

roles.js

var User = new Backbone.Role('user', {
  dashboard: {
    read: true
  },

  entity: {
    read: true,
    create: true,
    update: function(entity) {
      return !!entity.get('internalContacts').findWhere({ id: CurrentUser.get('id') });
    }
  }
});

// Extend performs 2-level deep merging
var Admin = User.extend({
  entity: {
    update: true
  }
});

template.hbs

{{#can "read" "entities"}}
   {{linkTo 'entities/index'}}Entities list{{/linkTo}}
{{/can}}


...

{{#each entities}}
  {{name}}
  
  {{#can "edit" "entities" this}}
    {{linkTo 'entities/edit' id}}Edit{{/linkTo}}
  {{/can}}
{{/each}}