custom-authorization.ts

// custom authorization decorator 
function ownerOrAdmin() {
  return authorize.custom(async ({ role, user, parameters }) => {
    return role.some(x => x === "Admin") || parameters[0] === user.userId
  })
}

export class UsersController {
  @ownerOrAdmin()
  @route.patch(":id")
  modify(id:number, user:User){
    // implementation
  }
}