nestjs CASL

barisx answered on June 2, 2022 Popularity 9/10 Helpfulness 3/10

answer nestjs CASL

nestjs CASL

Comment

type Subjects = InferSubjects<typeof Article | typeof User> | 'all';

export type AppAbility = Ability<[Action, Subjects]>;

@Injectable()
export class CaslAbilityFactory {
  createForUser(user: User) {
    const { can, cannot, build } = new AbilityBuilder<
      Ability<[Action, Subjects]>
    >(Ability as AbilityClass<AppAbility>);

    if (user.isAdmin) {
      can(Action.Manage, 'all'); // read-write access to everything
    } else {
      can(Action.Read, 'all'); // read-only access to everything
    }

    can(Action.Update, Article, { authorId: user.id });
    cannot(Action.Delete, Article, { isPublished: true });

    return build({
      // Read https://casl.js.org/v5/en/guide/subject-type-detection#use-classes-as-subject-types for details
      detectSubjectType: (item) =>
        item.constructor as ExtractSubjectType<Subjects>,
    });
  }
}

Popularity 9/10 Helpfulness 3/10 Language typescript

Source: docs.nestjs.com

Tags: casl nestjs typescript

Link to this answer
Share Copy Link

Contributed on Jun 02 2022

barisx

0 Answers Avg Quality 2/10

nestjs CASL

Contents

More Related Answers

nestjs CASL

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.