acl.js

var authorised = module.exports = function(req, res, next) {
  //check for cdc token
  return function(role) {
    //check roles with userid in userRoleLookupTable
  }
};

var access = authorised();


app.get("/admin", access('admin'), foo.list);
app.get("/user", access('user'), foo.show);
app.get("/all", access('all'), foo.get)