@casl/[email protected]

@casl/react-v1.0.2 (2019-02-16)

Performance Improvements

• react: checks whether ability changed before unsubsribing (d865fa8), closes #159

@casl/[email protected]

@casl/ability-v3.0.1 (2019-02-16)

Bug Fixes

• ability: copies event listeners before calling them (3148da1), closes #159

@casl/[email protected]

@casl/vue-v0.5.1 (2019-02-10)

Bug Fixes

• packages: increases peerDependency of @casl/ability (9f6a7b8), closes #119

@casl/[email protected]

@casl/react-v1.0.1 (2019-02-10)

Bug Fixes

• packages: increases peerDependency of @casl/ability (9f6a7b8), closes #119

@casl/[email protected]

@casl/mongoose-v2.3.1 (2019-02-10)

Bug Fixes

• packages: increases peerDependency of @casl/ability (9f6a7b8), closes #119

@casl/[email protected]

@casl/aurelia-v0.5.0 (2019-02-10)

Bug Fixes

• packages: increases peerDependency of @casl/ability (9f6a7b8), closes #119
• README: changes links to @casl/ability to point to npm package instead to git root [skip ci] (a74086b), closes #102

Features

• react:can: updates typescript declarations (213dcde)

@casl/[email protected]

@casl/angular-v2.0.0 (2019-02-10)

Bug Fixes

• packages: increases peerDependency of @casl/ability (9f6a7b8), closes #119

Features

• ability: adds support for manage action (d9ab56c), closes #119

BREAKING CHANGES

• ability: manage is not anymore an alias for CRUD but represents any action.

Let's consider the next example:

const ability = AbilityBuilder.define((can) => {
  can('manage', 'Post')
  can('read', 'User')
})

In @casl/[email protected] the definition above produces the next results:

ability.can('read', 'Post') // true
ability.can('publish', 'Post') // false, because `manage` is an alias for CRUD

In @casl/[email protected] the results:

ability.can('read', 'Post') // true
ability.can('publish', 'Post') // true, because `manage` represents any action

To migrate the code, just replace manage with crud and everything will work as previously.

@casl/[email protected]

@casl/ability-v3.0.0 (2019-02-04)

Bug Fixes

• ability: prevent creation of manage alias (4ca1268), closes #119
• ability: updates ts definitions for Ability (2c989b2), closes #119

Features

• ability: adds support for manage action (d9ab56c), closes #119

BREAKING CHANGES

• ability: manage is not anymore an alias for CRUD but represents any action.

Let's consider the next example:

const ability = AbilityBuilder.define((can) => {
  can('manage', 'Post')
  can('read', 'User')
})

In @casl/[email protected] the definition above produces the next results:

ability.can('read', 'Post') // true
ability.can('publish', 'Post') // false, because `manage` is an alias for CRUD

In @casl/[email protected] the results:

ability.can('read', 'Post') // true
ability.can('publish', 'Post') // true, because `manage` represents any action

To migrate the code, just replace manage with crud and everything will work as previously.

• ability: prioritise rules with all subject in the same way as other rules

Let's consider the next example:

const ability = AbilityBuilder.define((can) => {
  can('read', 'User', { id: 1 })
  cannot('read', 'all')
})

According to rule ordering read all rule must override read User rule but in @casl/[email protected] there was a bug and this is not true:

ability.can('read', 'User') // true

In @casl/[email protected] this works as expected

ability.can('read', 'User') // false

@casl/[email protected]

@casl/react-v1.0.0 (2019-02-03)

@casl/[email protected]

@casl/mongoose-v2.3.0 (2018-12-28)

Features

• mongoose: wraps resulting query into additional $and (1af1c54), closes #140