Aspect - Authorization

[0xgeert]

Implement using Policies as a middleware.

• complete before routes
• route-specific
• declarative

should support things such as:

Policies don't seem to be cover a simple use case of returning a subset of data. i.e. Take a simple example Users model Groups model, which is a nested set Users can belong to many groups Users can see all other users, in the same group or child groups

[0xgeert]

Look at sails.js policies. See http://youtu.be/GK-tFvpIR7c?t=8m34s