CASL: One Set of Permission Rules for Your Whole JavaScript App

Most apps start with a line like if (user.role === 'admin'). Then the same check shows up in a React component, then in an API handler, then in a database query. Six months later nobody remembers whic