CASL. Isomorphic Permission Management
summary
CASL is an isomorphic permission management library for JavaScript that provides a unified way to define and enforce user abilities both on the client (browser) and server (Node.js). The talk explains how to express permissions using CASL’s API and integrate it with typical stacks (front-end frameworks and back-end endpoints) to keep authorization logic consistent across environments.
AI-written summary · about
chapters (20)
- 0:00Start
- 2:14CASL. Isomorphic permission management
- 2:44Why CASL?
- 7:56Storytelling
- 9:19What's special in CASL?
- 11:35How to CASL
- 12:10Permissions: admin
- 12:33Permissions: unauthenticated
- 12:52CASL: admin
- 13:53CASL: unauthenticated
- 14:08CASL validation: seeds
- 14:19CASL validation: admin
- 14:42CASL validation: writer
- 14:56CASL validation: unauthenticated
- 19:36CASL Demo
- 20:42CASL Alternatives
- 22:29No Magic Behind!
- 24:16What else? Feature flags
- 24:47What else? Hardware capabilities
- 25:30What else? Business logic
related talks
20mBuilding Scalable Access Control Frameworks in React
43mApplication Code of Conduct - Full-Stack Policy as Code
43mBuilding Authorization with Node.js: Dos and Don’ts
54mAuthorization for modern Applications
39mUnified permission management between API and client
39mAuthentication & Authorization Architecture in the MEAN Stack
26mAuthorization in a Service-Oriented Environment
01h 00mCascade - A New High Level SELinux Policy Language