Router and authorization (permissions)

[sachingaikwad123]

I see that we have specific guidance on 'Authenticated Routes' but I don't see any guidance on 'Handling Authorization for Routes'.

1. What are community thoughts on how to handle this in router?
2. When a particular 'route' is not suppose to accessible to a user, how should we prevent this from router?
3. Is route.beforeLoad is good place to do these 'permission checks'?
4. Opinion: When user is not allowed to see a 'route', what will be good 'UX' for this? Redirect to 'home page' with a 'Popup Alert' message?

Note: I am using casl/ability and casl/react to do my RBAC checks.

[sachingaikwad123]

Anyone has any guidance on this question?