CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
toMongoQuery
accessibleRecordsPlugin
WhereInput
actionsFor(subjectType)