Abilities hooks

ability-hooks.js

...
function defineAbilitiesForSubject (subject) {
  const { rules, can, cannot } = AbilityBuilder.extract()

  // Run registered hooks
  hooks.forEach(hook => hook(subject, can, cannot))

  ...
}

defineAbilitiesForSubject.registerHook = function (hook) {
  if (!hooks.includes(hook)) {
    hooks.push(hook)
  }
}
defineAbilitiesForSubject.unregisterHook = function (hook) {
  hooks = hooks.filter(registeredHook => registeredHook !== hook)
}

// Hook computing anonymous abilities for a given user
function defineAnonymousAbilitiesForSubject (subject, can, cannot) {
  // Register
  can('create', 'users')
}
...

// Register all default hooks here, others will be registered dynamically when setting up other modules
// Default rules for unauthenticated users
defineAbilitiesForSubject.registerHook(defineAnonymousAbilitiesForSubject)
  // Other rules might be added/remove at other entry points of the app
...