AlsoCan is an authorization library. It's a replacement for CanCan with additonal features:

Features:

• Export all permissions of a given user to load them up on the front end
• Support for explicity deny
• Rich debugging output to show exactly why an action was allowed or denied
• Wildcard actions
• Zero dependencies

Usage

npm install alsocan

const AlsoCan = require('./alsoCan');

const alsoCan = new AlsoCan({
	targetCompare: (instance, model) => instance instanceof model,
	userCompare: (user, role) => user.role === role,
    // Will print debug info to the console if truthy
	debug: process.env.DEBUG_AUTHORIZATION,
	defaultUser: user => user || { name: 'general public', permission: 'public' }
});

class Posts {};
const isSameOrg = (user, target, ctx, action) => user.organisationId === target.organisationId;
const isOwner = (user, target, ctx, action) => user.id === target.userId;

allow('ADMIN', ['manage'], Posts, isSameOrg);
allow('USER', ['edit*'], Posts, isOwner);

// Authorize access to a record, throws if not allowed
alsoCan.authorize(user, 'edit', record, ctx);
// Returns true if the user can perform the action
const can = alsoCan.can(user, 'edit', record, ctx);

Publishing

1. Update the version in package.json
2. Add the npm registry user credentials with pnpm adduser
3. Publish the package with pnpm publish It will take you to the browser to log in to npm, or to just add the 2FA code if you are already logged in.