ability-js
ability-js copied to clipboard
A simple route-based ACL component for express.js. This won't handle actual authentication, you can use everyauth for that.
Currently ability supports only redirects for regular http requests. ajax support could be added by adding check for req.xhr and sending a 403 before hard redirect.
would be great to add support for target wildcards e.g. 'tweets/*': ['read'] would match all urls like: /tweets /tweets.:format? /tweets/new /tweets/:id /tweets/:id/edit /tweets/:id.:format? maybe i'm missing something and this might...
Hi, Is the use of the able.to helper to check if the user has access on a certain target or to assign access to a target. From the docs, i...