Node.js and ACL

Question

I've chosen for my project Node.js+Express+Mongoose. Until now, I didn´t need to use ACL, but in this phase of project a I need to implement this.

NPM contains a few modules, but which one to choose?

Please tell me your experiences with ACL (Node.js+Express+Mongoose). And If you know any tutorial it would be great :), but it's not so needed, what I exactly need to know what Node.js programmers are using for ACL.

Last possibility is write own acl-middleware, it could be interesting experience for me. I suppose :)

Answer 1

https://npmjs.org/package/acl

The most used ACL module. It has Express middleware for protect resources and mongo support too..

Update 9.2020:

• the acl package has not been updated in 2 years
• there is a fork with recent changes: https://github.com/flash-oss/node_acl

Answer 2

acl package has not been updated for the last 2 years. I’m the author of CASL - isomorphic permission management for JavaScript - https://github.com/stalniy/casl

According to npm trends it’s the mostly used library nowadays - https://www.npmtrends.com/acl-vs-@casl/ability

By the way it makes an integration with MongoDB and mongoose really easy!