Requirements Protect access to pages Protect functionality Questions Can users have multiple roles? No Are there custom permissions? No Role inheritance? No Server + client? Yes Polling? Protected api on the server. Protected routes on the client. See onEnter and example