The old JSON-blob RBAC died today. Five migrations: roles table, role permissions table, role column changed from enum to varchar, existing JSON role payloads migrated into the new normalised structure, and a platform modules table that hints strongly at the SaaS direction coming in May.
The old system had role definitions baked into JSON strings in a database column. Querying "which users have permission X" required loading and deserialising every role row. The new system answers that in a single indexed join. The migration that re-keyed existing accounts handled approximately a dozen users cleanly with no data loss.