Permissions

Since the application logic is quite tiny, all we need to do here is limit only the backend servers to emit events.

event:
  '*':
    subscribe: "true"
    emit: "server.data.role === 'admin'"