stalniy/casl

Features

• Application Access Controls - Defines and enforces declarative rules to determine which users can perform specific actions on application resources.
• Attribute-based Access Controls - Provides an attribute-based access control system that enforces permissions based on user attributes and resource metadata.
• Permission-Based Access Control - Defines declarative rules based on actions, subjects, and conditions to determine what a user can do within an application.
• Permission-to-Query Translators - Translates declarative permission rules into database query filters to restrict record access based on user abilities.
• Query Filtering - Translates declarative authorization rules into database filters to retrieve only authorized records.
• Permission-Based - Translates declarative permission rules into database-specific filters to retrieve only authorized records.
• Authorization - Converts declarative permission rules into database-specific filters to restrict data retrieval at the storage layer.
• Authorization Filter Generation - Converts declarative permission rules into database-specific filter queries to restrict record retrieval.
• Authorization Rule Engines - Evaluates permissions using a consistent set of actions and subjects without embedding logic into business code.
• Permission Definitions - Defines permissions using a set of actions, subjects, and conditions without hardcoding logic.
• Field-Level Access Controls - Controls which specific attributes of a resource a user is permitted to interact with.
• Field-Level Read Restrictions - Conditionally hides or shows specific data fields based on authorization to prevent sensitive data leaks.
• Data and Resource Permissions - Implements granular controls for restricting visibility and operations on specific data resources based on declarative rules.
• Permission Rule Groups - Maintains a consistent set of authorization rules across different application layers through serialization.
• Field-Level Permissions - Provides granular security policies that restrict access to specific fields or attributes within a data object.
• JavaScript Authorization Libraries - Provides a comprehensive library for defining and enforcing declarative access control rules across JavaScript environments.
• Database Query Permissions - Enables the definition of complex permission logic using database-specific query syntax for model filters.
• Permission Serialization - Defines permissions in a declarative, serializable format to share rules between backend APIs and frontend interfaces.
• Conditional Access Rules - Implements logic for evaluating dynamic attributes and conditions to determine resource access.
• Record-Level Filtering - Automatically filters database query results to return only the records a user is permitted to access.
• User-Based Access Restrictions - Validates if a specific user action is permitted on a given object based on defined ability rules.
• User Permission Definitions - Maps user actions to specific subjects and attributes using declarative rules to determine resource access.
• Access Rules - Provides a declarative system for defining granular permissions for application resources using actions and conditions.
• Isomorphic Logic Sharing - Runs the same rule evaluation engine in both browser and server environments for consistent authorization.
• Isomorphic Authorization - Provides a consistent authorization system that shares permission rules between a server API and a client interface.
• Permission-Based UI Rendering - Toggles the visibility of components based on user permissions and triggers automatic re-renders.
• Permission-Based Visibility Controls - Toggles the visibility of template elements using services or signals based on the current permissions of the user.
• Conditional Rendering - Toggles the visibility of interface elements and components based on the user's current permissions.
• Backend as a Service - Represents authorization rules as plain data objects for transmission between a backend API and a frontend client.
• User Role Management - Provides tools for modifying and auditing user roles and permissions dynamically during a session.
• Dynamic Permission Refresh - Refreshes the active permission set in real-time when authentication states or user roles change.
• Permission Management - Provides utilities for handling user authorization and checking abilities within UI components.
• Custom Matching Functions - Allows replacing default matching logic with custom functions to determine if specific authorization conditions are met.
• Authorization State Sharing - Shares a central permission instance across the component tree and synchronizes state between server and client.
• Serializable Permission Sets - Represents authorization rules as plain data objects to enable transmission between a backend API and a frontend.
• Reactive State Managers - Triggers automatic user interface updates when the active set of authorization permissions changes.
• Language Drivers - Permissions management library for Mongoose-based applications.
• Access Control - Integrates isomorphic permission management into Angular.
• Authentication and Authorization - Isomorphic authorization for UI and API layers.
• Authentication & Authorization - Isomorphic authorization for UI and APIs.

سجل النجوم