@samdark @thenotsoft Thinking about the authentication middleware with rbac, i think if it would make sense, for example i define three roles (guest, user, admin), and create the permissions (register, login) for guest, for user (register, login, settings, profile, logout) and for admin (register, login, logout, settings, profile, user/create, user/delete, user/update) then if it makes sense to do that check in Middleware, we save the role in identity, and to configure more specific permissions can be done on the controller, in this case each permission would be the view.