🔧 Stop Scattering if (role === 'admin') Everywhere: A 3-Level Permission Tree for Page & Section Access

Most apps start their access control with something like this:



function canEditReportsSummary(role) {
return ['EDITOR', 'ADMIN'].includes(role);
}






It works, right up until you have a dozen pages, each with a few sections, each
needing independent read/write rules per role. Now you've got dozens of these
little arrays scattered across...