How do you implement role based authorization, where different users see different content based on their role?

You store a role field on the user's account, such as admin or member, and check that role wherever access needs to be restricted, either in a server component before rendering or in an API route before processing a request, returning a forbidden response or a different view for unauthorized roles.

export default async function AdminPage() {
  const session = await getSession();
  if (session?.user.role !== 'admin') {
    return <p>You do not have access to this page.</p>;
  }
  return <AdminDashboard />;
}