Security posture

Reading… Every API call is checked against these roles.