[keycloak-user] Keycloak RBAC permission check in node API