Netlify allows protecting content based on a configuration file, outline a process of mapping subscriptions to roles and let Netlify handle the protection of content
[[redirects]]
from = "/gated-path"
status = 200
conditions = {Role = ["admin"]}
force = true
If the user does not have a role we should provide a meaningful fallback and the option to redirect to authentication or manage their subscription.