How to use @casl/mongoose - 1 common examples

const ability = defineAbilitiesFor(hook.params.user)
    const throwUnlessCan = (action, resource) => {
      if (ability.cannot(action, resource)) {
        throw new Forbidden(`You are not allowed to ${action} ${serviceName}`)
      }
    }

    hook.params.ability = ability

    if (hook.method === 'create') {
      hook.data[TYPE_KEY] = serviceName
      throwUnlessCan('create', hook.data)
    }

    if (!hook.id) {
      const query = toMongoQuery(ability, serviceName, action)

      if (canReadQuery(query)) {
        Object.assign(hook.params.query, query)
      } else {
        // The only issue with this is that user will see total amount of records in db
        // for the resources which he shouldn't know.
        // Alternative solution is to assign `__nonExistingField` property to query
        // but then feathers-mongoose will send a query to MongoDB which for sure will return empty result
        // and may be quite slow for big datasets
        hook.params.query.$limit = 0
      }

      return hook
    }

    const params = Object.assign({}, hook.params, { provider: null })