# Project 11 Summary

We removed `requiresLogin` and added rbac.

## What made you smile?

* Everything was smooth without any issues on the way.


## What did you find confusing?

* It's a weird behaviour where you can lower permissions of a "creator" of the orgationazion. How do we protect real owners from permissions hijacking?