How to Build a Multi-Tenant SaaS API with Node.js, RBAC, and Audit Logging

A colleague asked me to help debug what looked like a permissions issue in their SaaS project management tool. Users were seeing resources they hadn't created. I pulled up the query logs expecting som