Merge pull request #54 from dbvcode/patch-1

Appened typescript version of code

docs/getting-started.md

@@ -118,6 +118,52 @@ module.exports = {
   defineAbilitiesFor
 };
 
+```
+Typescript version of the code:
+
+```js
+// src/services/authentication/authentication.abilities.ts
+import { createAliasResolver, makeAbilityFromRules } from 'feathers-casl';
+import { AbilityBuilder, Ability } from '@casl/ability';
+
+// don't forget this, as `read` is used internally
+const resolveAction = createAliasResolver({
+    update: 'patch',       // define the same rules for update & patch
+    read: ['get', 'find'], // use 'read' as a equivalent for 'get' & 'find'
+    delete: 'remove'       // use 'delete' or 'remove'
+});
+
+export const defineRulesFor = (user: any) => {
+    // also see https://casl.js.org/v5/en/guide/define-rules
+    const { can, cannot, rules } = new AbilityBuilder(Ability);
+
+    if (user.role && user.role.name === 'SuperAdmin') {
+        // SuperAdmin can do evil
+        can('manage', 'all');
+        return rules;
+    }
+
+    if (user.role && user.role.name === 'Admin') {
+        can('create', 'users');
+    }
+
+    can('read', 'users');
+    can('update', 'users', { id: user.id });
+    cannot('update', 'users', ['roleId'], { id: user.id });
+    cannot('delete', 'users', { id: user.id });
+
+    can('manage', 'tasks', { userId: user.id });
+    can('create-multi', 'posts', { userId: user.id });
+
+    return rules;
+};
+
+export const defineAbilitiesFor = (user: any) => {
+    const rules = defineRulesFor(user);
+
+    return makeAbilityFromRules(rules, { resolveAction });
+};
+
 ```
 
 ### Add abilities to hooks context