role-based access control .cursorrules strategies