stalniy

const { AbilityBuilder, Ability } = require('casl')

function defineAbilitiesFor(user) {
  const { rules, can } = AbilityBuilder.extract()

  can('read', ['Post', 'Comment'])
  can('create', 'User')

  if (user) {
    can('manage', ['Post', 'Comment'], { author: user._id })

stalniy

function defineAbilitiesFor(user) {
  const { rules, can } = AbilityBuilder.extract()

  if (user) {
    can('manage', ['Post', 'Comment'], { author: user._id })
    can(['read', 'update'], 'User', { _id: user.id })
  } else {
    can('read', ['Post', 'Comment'])
    can('create', 'User')
  }

stalniy

import { AbilityBuilder } from 'casl'

const user = whateverLogicToGetUser()
const ability = AbilityBuidler.define(can => {
  can('read', ['Post', 'Comment'])

  if (user.isLoggedIn) {
    can('create', 'Post')
    can('manage', ['Post', 'Comment'], { authorId: user.id })
  }

stalniy

const { mongoosePlugin, AbilityBuilder } = require('casl')
const mongoose = require('mongoose')

mongoose.plugin(mongoosePlugin)

const Post = mongoose.model('Post', mongoose.Schema({
  title: String,
  author: String,
  content: String,
  createdAt: Date

stalniy

import { Ability } from 'casl'

export class CanValueConverter {
  static inject = [Ability]

  constructor(ability) {
    this.ability = ability
  }

  toView(subject, action) {

stalniy

import { AbilityBuilder, Ability } from 'casl'

function defineRulesFor(user) {
  const { can, rules } = AbilityBuilder.extract()

  can('read', ['Post', 'Comment'])

  if (user) {
    can('create', 'Post')
    can('manage', ['Post', 'Comment'], { authorId: user._id })

stalniy

import { DataStore } from '../services/ds'

function listenToSessionChanges(ds, onChange) {
  ds.on('afterCreate', (name, session) => {
    if (name === 'Session') {
      onChange(session)
    }
  })

  ds.on('afterFind', (name, id, mapper, session) => {

stalniy

function subjectName(subject) {
  if (!subject || typeof subject === 'string') {
    return subject
  }

  return subject.constructor.mapper.name
}

export function configureAbility({ container }) {
  const ability = new Ability([], { subjectName })

stalniy

<nav class="menu">
  <h3>Menu</h3>
  <ul>
    <li if.bind="'Post' | can: 'create'">
      <a route-href="route: newPost">Add Post</a>
    </li>
  </ul>
</nav>

stalniy

<nav class="menu">
  <h3>Menu</h3>
  <ul>
    <li if.bind="'Post' | can: 'create' & signal: 'ability-changed'">
      <a route-href="route: newPost">Add Post</a>
    </li>
  </ul>
</nav>