kevin-asprec 67bb6cc95c feat(01-04): CASL permission definitions and ability factory ...

- Install @casl/ability for role-based access control
- Create src/lib/casl/types.ts with AppAbility, AppSubjects, AppActions types
- Create src/lib/casl/permissions.ts with permission matrix for all 5 roles
- Create src/lib/casl/ability.ts with defineAbilityFor() factory function
- Support multi-role users via additive union of permissions
- Super-admin bypasses all permission checks via can("manage", "all")

2026-03-04 18:52:39 +08:00

324 KiB

Raw Blame History

View Raw