- support latest mongoose version
- refactor query hook to use built-in mongoose hooks
- removed support for templates in rules
- main module (security) is not a singleton anymore, but can be and must be instantiated, providing a mongoose instance. Any security related operations should be done on this instance.
- policy files loaded by
security#loadPolicy
must now export a function taking thesecurity
instance as the only parameter - introduce field level read permissions (PR)
- some refactorings around query hook
- update some dependencies
- bug fixes
- API changes:
- renamed permissions to
create, read, update, remove
- changed
security#buildPolicy()
tosecurity#buildPolicy(modelName)
, now directly returns model's policy builder.
- renamed permissions to
- initial beta release