Check for "all" entities instead of "at least one"

Hi,

I currently have this ability :

can("read", "User", { id: this.id });

Basically, every user in the app have the permission to read their own profile. But admins can read every profiles so, they have this ability

can("read", "User");

And everything is ok for individual profiles check.

But il also have a list of all users. And only admin can see this list.

The check can("read", "User"); returns true for both, because, as specified in the documentation, every user can read at least one user : themselves.

How can I check for “can read ALL users” ?

Thanks you in advance for response

[Varkal]

Ok, i’ve got it!

Thank you very much for your help !

[Gleb-Gaiduk]

Help please: https://stackoverflow.com/questions/70584146/nest-js-authorization-with-casl-doesnt-work-as-expected