The seeded role is SuperAdmin, but the middleware only matched superAdmin, so SuperAdmin could be denied documents and other new permissions.
Express/MongoDB backend with JWT auth, RBAC, S3 uploads, notifications, and scheduled jobs.