Use Casbin to manage user permissions about api

[hsluoyz]

Hi @AnandChowdhary @MP70 I'm from Casbin team. We have made a Prisma adapter these days: https://github.com/node-casbin/prisma-adapter . Can you try it?

[issue-label-bot]

Issue-Label Bot is automatically applying the label feature_request to this issue, with a confidence of 0.57. Please mark this comment with 👍 or 👎 to give our bot feedback!

Links: app homepage, dashboard and code for this bot.

[MP70]

Taking another look, perhaps using casbin (https://github.com/casbin/node-casbin) preferably or https://github.com/onury/accesscontrol#guide as a framework for managing this RBAC is a more flexible approach?

[AnandChowdhary]

@mattpi-NSL, using Casbin is a great idea! It's far superior to the current hard-coded authorization helper, and it's much more scalable and customizable. Let's put this on the project!

[MP70]

I have taken a look a bit further down this path. For now in my branch I am using Postgres for the database, I notice this master branch is now using Prisma. Casbin has adapters for Knex/Sequelize/TypeORM as SQL ORMs as well as for psql and mysql however it doesn't have one for prisma. I think this may mean that we need to write an adapter for Prisma or (re)use Redis for this.

[MP70]

Wow! Thank you so much, this is incredible! My fork has diverged quite a lot from this and I am using different set of technologies, so I will leave this to @AnandChowdhary for now, however if he doesn't get to it first, then as soon as I have some free time I will definitely take a look at this!

[AnandChowdhary]

Can you try it?

This looks great, thanks for all your hard work, @hsluoyz! I'll definitely have a look at this, because now it fits right into our Prisma-led database framework and would be much easier to adopt.

[AnandChowdhary]

Good news! After many months, this is now shipped in master! 😄

Default policy model: https://github.com/staart/api/blob/master/casbin-model.conf
Updated authorization helper, built with Casbin: https://github.com/staart/api/blob/master/src/_staart/helpers/authorization.ts

[hsluoyz]

Thanks! It's great work!