This is the second part in the series of articles where I share my experience building and optimizing CASL v5: CASL. Pursuing Perfection I: Why? CASL. Pursuing Perfection II: New Engine CASL. Pursuing Perfection III: Big O CASL. Pursuing Perfection IV: Type Safety First time you’ve heard about CASL? You…

This is the first part in the series of articles where I plan to share my experience building and optimizing CASL v5: CASL. Pursuing Perfection I: Why? CASL. Pursuing Perfection II: New Engine CASL. Pursuing Perfection III: Big O CASL. Pursuing Perfection IV: Type Safety First time you’ve heard about…

First time you’ve heard about CASL? You may want to read “What is CASL?”. I’m glad to announce that CASL 4.0 was released few days ago and brought several powerful possibilities on our desk: Type Safety @casl/* packages were rewritten to TypeScript. This makes your apps safer and developer experience more enjoyable…

CASL gets more and more attraction from developers. This requires additional time to write new features, complementary packages, documentation and answering questions in gitter chat. …

Modern applications usually displays only what is visible to the user based on their role. For example, a guest user may read stories but can’t write comments on Medium. Or another example, an authorized user can write and remove drafts. But that user is not allowed to see or remove…

With growing amount of devices, applications were split into 2 separate services: front-end (UI, what user sees and interacts with) and back-end (API, implies business rules). These 2 pieces may be written in the same language (e.g., JavaScript) or in different (e.g., JavaScript on UI and Ruby on API). That…

CASL is an isomorphic authorization JavaScript library which makes permissions management easy. First time you’ve heard about CASL? You may want to read “What is CASL?”.

In authenticated frontend apps, we often want to change what’s visible to the user depending on their role. For example, a guest user might be able to see a post, but only a registered user or an admin sees a button to delete that post. Managing this visibility may become…

Recently I had a chance to work with a Vuejs2 based application. It’s amazing how simple and powerful Vue is. Nowadays almost every app is used by multiple users, that means almost every application needs to have an access control layer to provide different functionality to different users. So, in…