Netlify allows protecting content based on a configuration file, outline a process of mapping subscriptions to roles and let Netlify handle the protection of content

[[redirects]]
  from = "/gated-path"
  status = 200
  conditions = {Role = ["admin"]}
  force = true

If the user does not have a role we should provide a meaningful fallback and the option to redirect to authentication or manage their subscription.