Comments (3)
I looked desperately to hide proxy details and never found this solution. Would be so nice to implicitly unwrap proxy, but API already published. Maybe add Subject
and alike decorators and deprecate prefixed ones. Anyway, this is super useful, I'll think how to best handle it and add asap.
from nest-casl.
There is no BC in my example :)
Just need to add UnwrapCaslSubjectPipe
to your library (@CaslSubject
works with pipes)
from nest-casl.
I'd be interested in something like this.
Basically right now whenever there is an ID for a resource in the parameters we use a transformer pipe so that fetch the resource, error if not found and then have it delievered into the controller method argument.
e.g
@Get(':id')
@UseGuards(AccessGuard)
@UseAbility(Actions.read, ProductDto)
@ApiOkResponse({ type: ProductDto })
getProduct(@Param('id', ProductTransformerPipe) product: IProduct): IProduct {
return product;
}
Would love a way that Casl could use this object as the subject. Any ideas?
from nest-casl.
Related Issues (20)
- Condition on Ability not working HOT 1
- Question: How could I use CASL ForbiddenError.setDefaultMessage? HOT 5
- Let use getUserHook for @UseAbility() guard
- Cannot read properties of undefined (reading 'includes') HOT 2
- V 1.6.13 has introduced breaking changes HOT 1
- Feature Request: A dynamic user roles value, multiple user roles (array) or single value user role. HOT 1
- Not restricting access when no hook is specified in UseAbility HOT 3
- Multiple Abilities => UseAbility should be able to take in arrays
- Alias group names
- assertAbility throws 401 HOT 3
- Cannot read properties of undefined (reading 'everyone') HOT 7
- Question: mock UserProxy and SubjectProxy in unit tests HOT 1
- Property 'X' does not exist on type 'AuthorizableUser<Role, string>'
- Is there support for passing in an ability builder? HOT 3
- Id checking doesn't work properly. It allows patch any user instead of himself HOT 1
- Error [ERR_REQUIRE_ESM]: require() of ES Module HOT 3
- params are not typed on run method when implementing SubjectBeforeFilterHook HOT 1
- Bug when using a condition on read permission HOT 3
- Access to params in permissions
- Conditional rule always throws Forbidden.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nest-casl.