Permission check API about express-acl

[nyambati]

@kahwooi
This module does not have such method or API as it is basically a middleware between the client and your resources. It will only allow traffic to endpoints that have been allowed in your configuration. When you make a request to an Unauthorised endpoint, you will get a JSON response as below.

{
  "status": "Access denied",
  "success": false,
  "message": "Unautorised Access"
}

You can use this JSON object to disable rendering a view. Frameworks like Angular provides hooks that can tap into to render a view only when certain conditions are fulfilled e.g ui-router resolve.

Based on your scenario I would recommend you use roles attached to each user to achieve this e.g

function renderSalesView(user) {
  let allowed = ['admin', 'sales'];
  return (allowed.includes(user.role)) ? true : false;
}

You can decide to render the new sales page only when the method returns true. With this you can achieve the same results without making any request to your server.