How do you implement role-based access control using Maps and Symbols for permission management in JavaScript?

Role-based access control (RBAC) using Maps and Symbols in JavaScript manages permissions by using Maps to associate roles with permission sets and Symbols to create unique, tamper-proof keys for sensitive permission identifiers.

Use a Map to define roles with their respective permission sets keyed by Symbols for unique identification. Check permissions by comparing Symbol keys, ensuring secure and efficient access control without name conflicts.

Code

const READ = Symbol('read');
const WRITE = Symbol('write');

const rolePermissions = new Map();
rolePermissions.set('admin', new Set([READ, WRITE]));
rolePermissions.set('user', new Set([READ]));

function canAccess(role, permission) {
  return rolePermissions.get(role)?.has(permission);
}

console.log(canAccess('admin', WRITE)); // true
console.log(canAccess('user', WRITE));  // false