Ask HN: Roles as Endpoints or Scoped Roles for an API? | Hacker News Reader