I guess (hope) that you already found your solution. However, in case someone else stumbles across this post now, Strapi have updated the documentation for this kind of custom implementation: Role-Based Access Control (RBAC) - Strapi Developer Docs
I guess (hope) that you already found your solution. However, in case someone else stumbles across this post now, Strapi have updated the documentation for this kind of custom implementation: Role-Based Access Control (RBAC) - Strapi Developer Docs