What problem does it solve?
This Skill provides a robust and type-safe way to manage access control in applications, ensuring that users only have the permissions they are explicitly granted, based on roles and attributes.
Core Features & Use Cases
- RBAC & ABAC: Supports Role-Based Access Control and Attribute-Based Access Control for flexible permission management.
- Framework Integrations: Offers middleware and helpers for popular frameworks like Express, Hono, Next.js, and NestJS.
- Client-side Components: Provides React hooks and components for managing permissions on the frontend.
- Use Case: Securely manage user access to different resources (e.g., posts, users) within a web application, ensuring editors can update posts but only if they are the owner.
Quick Start
Use the duck-iam skill to define a role named 'editor' that can update posts.