What's the best way to manage rules for both the db (Prisma) and the UI (NextJs)?

[gandha9394]

This might be a dumb question.
But I have rules for the db which works very well. Especially with the use of Prisma abilities, I am able to access control the queries and mutations.

But when I need to use it to control the UI like disable a button based on rules, I can't seem to re-use the prsima ability and forced to duplicate the rules for the sake of UI.

Is this how its supposed to be done? The replication of rules feels redundant to me.

[stalniy]

You have 2 options:

1. Do not use casl on FE, just rely on some properties exposed by API. This properties actually represent casl checks on API side. So then UI doesn’t need complex permission handling.
2. Convert backend rules to FE rules, basically preprocess rules in a way that FE can use them return them via API endpoint

[gandha9394]

Thanks for the reply. I think you are right.