Building Field-Level RBAC in Payload CMS
Payload ships with access control but no roles. Here's how we built a role-based access control plugin for Payload 3: per-collection and per-field CRUD permissions, multi-tenant scoping, and a tree UI for authoring it all — enforced without rewriting a single collection's access function.