nest-access-control | Role and Attribute based Access Control for Nestjs 🔐 | Authorization library

See example folder for the more code. We need to build a Video service so users can share there videos with others, but we need some admins to control these videos. Pro Tip :+1: : Keep all roles organized and in one file e,g: app.roles.ts.
NPM:
Yarn:
Let's first define our roles: To build our roles we will need the RolesBuilder class, it extends the AccessControl class from accesscontrol package. // app.roles.ts export enum AppRoles { USER_CREATE_ANY_VIDEO = 'USER_CREATE_ANY_VIDEO', ADMIN_UPDATE_OWN_VIDEO = 'ADMIN_UPDATE_OWN_VIDEO', } export const roles: RolesBuilder = new RolesBuilder(); roles .grant(AppRoles.USER_CREATE_ANY_VIDEO) // define new or modify existing role. also takes an array. .createOwn('video') // equivalent to .createOwn('video', ['*']) .deleteOwn('video') .readAny('video') .grant(AppRoles.ADMIN_UPDATE_OWN_VIDEO) // switch to another role without breaking the chain .extend(AppRoles.USER_CREATE_ANY_VIDEO) // inherit role capabilities. also takes an array .updateAny('video', ['title']) // explicitly defined attributes .deleteAny('video');
Next let's use AccessControlModule in our Root module: