Verso Day 7 — RBAC, tenant invitations, and why I am building security into the foundation

Day 7 of building Verso (projectoye.com)
A workspace OS replacing Word, Excel, PowerPoint, and Notion with one AI-native environment.

Today’s progress:

• Extended the multi-tenant schema implementation

• Added RBAC (Role-Based Access Control)

• Built the email invitation flow to invite users into a tenant

Current challenge:
When building RBAC for a multi-workspace product, where should roles be enforced?

• Workspace level?

• Organization level?

• Or both?

My current approach is both — but the complexity increases quickly.

Would love to hear how others have approached this.

→ projectoye.com