Request for Prisma support

Requirements

• working on support for https://www.prisma.io/docs/concepts/components/prisma-client
• casl rules needs to be translated in where part of prisma query https://www.prisma.io/docs/concepts/components/prisma-client/filtering-and-sorting#filtering
• toPrismaQuery should automatically detect queries on related entities and provide the correct include (https://www.prisma.io/docs/concepts/components/prisma-client/relation-queries)
• no support for JSON column in Postgres
• use PrismaWhere object to define conditions in rules, so the DX is more prismy (no need to know MongoQuery)

Progress

• ~interpreter for model properties~
• custom js interpreter for PrismaQuery
• get Prisma’s WhereInput type in generic way
• casl rules transformer
• PrimaAbility & types for custom Ability conditions matcher
• testing
• Docs
• add to prisma e2e tests https://github.com/prisma/e2e-tests/
• prisma example

Usage

import { AbilityBuilder } from "@casl/ability";
import { PrismaAbility, toPrismaQuery } from "@casl/prisma";

const { can, build } = new AbilityBuilder(PrismaAbility);

can("read", "User", { firstName: { startsWith: "John" } });

const ability = build();

await prisma.user.findMany({
  include: abilitiesQuery.include,
  where: {
    AND: [
       acessibleBy(ability).User, // permissions conditions
       { // business logic related conditions
         deleted: false
       }
    ]
  ]
});

Questions:

1. Do I need to add definePrismaAbility() similar to defineAbility which creates Ability instance that supports MongoQuery?

[lloydclosson]

@stalniy This is great. I paid the $600. Really looking forward to having this support in CASL. If the timeline on the start / end dates change please let me know.

[stalniy]

The major work is done! Tomorrow, I plan to add tests and if all good, I will release the 1st alpha either tomorrow or on Mon