evernote-enterprise-rbac

# Evernote Enterprise RBAC ## Overview Implement role-based access control for Evernote integrations, including Evernote Business account handling, shared notebook permissions, multi-tenant architecture, and authorization middleware. ## Prerequisites - Understanding of Evernote Business accounts and shared notebooks - Multi-tenant application architecture - Authentication/authorization infrastructure ## Instructions ### Step 1: Evernote Permission Model Evernote has built-in sharing permissions for notebooks: `READ_NOTEBOOK`, `MODIFY_NOTEBOOK_PLUS_ACTIVITY`, `READ_NOTEBOOK_PLUS_ACTIVITY`, `GROUP`, `FULL_ACCESS`. Map these to your application's role system. ```javascript const EvernotePermissions = { READ: 'READ_NOTEBOOK', WRITE: 'MODIFY_NOTEBOOK_PLUS_ACTIVITY', FULL: 'FULL_ACCESS' }; const AppRoles = { viewer: [EvernotePermissions.READ], editor: [EvernotePermissions.READ, EvernotePermissions.WRITE], admin: [EvernotePermissions.FULL] }; ``` ### Step 2: RBAC Service Build a service that checks whether a user has the required permission for an operation. Query shared notebook privileges via `noteStore.listSharedNotebooks()` and `getSharedNotebookByAuth()`. ```javascript class RBACService { async canAccess(userToken, notebookGuid, requiredPermission) { const noteStore = this.getAuthenticatedNoteStore(userToken); const sharedNotebooks = await noteStore.listSharedNotebooks(); const shared = sharedNotebooks.find(sn => sn.notebookGuid === notebook...