nest-rs-authz 0.2.0

CASL-style authorization for nestrs: one ability definition driving an access gate, a SeaORM query pre-filter, and response field-masking. Transport bindings (`http`, `graphql`, `mcp`) live behind Cargo features; the database-coupled extractors (`Bind`, `bind`, `LoaderScope`, `WsDataContext`) live in `nest-rs-seaorm` so the engine stays free of a data-layer dependency.
Documentation 
1
2
3
4
5
6
7
8

//! Authorization subjects. The single bridge below isolates the ORM coupling
//! so introducing a second ORM moves one impl, not the engine.

/// Compile-time guardrail that `S` is a real subject rather than an arbitrary
/// type. Implemented for every SeaORM entity by the blanket bridge below.
pub trait Subject: 'static {}

impl<E: sea_orm::EntityTrait> Subject for E {}