CASL

npm add @casl/react @casl/ability

interface Rule {
  pricipal: string; // e.g. user id
  action: string; // read
  subject: string; // Post
  conditions: any; // {"published": true}
}

function defineAbilitiesFor(role) {
  const { can, build } = new AbilityBuilder(Ability);

  if (role === 'user') {
    can('read', 'Article');
    can('create', 'Article');
  } else if (role === 'admin') {
    can(['read', 'create', 'update', 'delete'], 'Article');
  }

  return build();
}

can('read', 'Address', { 'country.isoCode': 'UA' });
can('read', 'Post', 'author.*');
can('read', 'Post', 'vehicle.*.generic.*');

// 支持自定义 any/all
// 默认 manage 和 all
const ability = new Ability([{ action: '*', subject: '*' }], {
  anyAction: '*',
  anySubjectType: '*',
});

can('*', 'Post');
can('*', '*');

interface BaseRawRule<Conditions> {
  fields?: string | string[];
  conditions?: Conditions;
  /** indicates that rule forbids something (i.e., has inverted logic) */
  inverted?: boolean;
  /** explains the reason of why rule does not allow to do something */
  reason?: string;
}

// Route-as-Subject
can('view', '/xyz')
// Entity-as-Subject
can('view', 'Page', { path: '/xyz' })