Decision: Model permissions before screens
Why?
Teams, organizations, roles and user actions were becoming harder to reason about from UI requirements alone.
Alternative
Add per-screen checks as features were built.
Tradeoff
A permission model adds upfront design, but prevents hidden inconsistencies across the product.
Outcome
RBAC became a product concept that technical and non-technical stakeholders could discuss.