NestJS · Authorization · Junior · Concept
RBAC with roles metadata — limitations?
Short Interview Answer
Roles are coarse; resource ownership and attributes need more than @Roles('admin').
Detailed Explanation
Combine roles with resource checks in services/policies. Multi-tenant apps need tenant-scoped authz.