A microkernel prototype implementation that filters nodes based on simple access rights. Each user has a password, and (optionally) a list of rights, stored as follows: /:user/x { password: "123", rights: "a" } Each node can require the user has a certain right: /data { ":right": "a" } Access rights are recursive. There is a special right "admin" which means everything is allowed, and "write" meaning a user can write.
This implementation is not meant for production, it is only used to find (performance and other) problems when using such an approach.