TODO.md

TODO

• implement attributes permission (https://www.npmjs.com/package/notation)
• change "can" method
• implement library entry-point
• implement setPermission
• extract resource-list filters for each role of a user to query the database
• express explicit integration
• send 401 status when non permission was found
• define the user req property name (default = 'user')
• define premission denied custom callback
• Error handling
• Redis cache
• Documentation
• 100% Coverage