@naskot/custom-permission-guard

The library handles global resources and domain resources, with five base actions: access, read, create, modify, delete, plus custom actions.

Rights are carried by groups, with a default group for new accounts, protected groups and lockout protection: nobody can remove the last permission that allows groups to be administered.

In the application, everything goes through guards and decorators. Escalation protection prevents anyone from granting a permission they do not hold themselves.

It is published on npm, versioned with semantic versioning and covered by unit tests.