'use strict';
 
var UserSchema = new require('mongoose').Schema({
  name: String,
  password: String
});
 
//Permission tree initialization
UserSchema.plugin(require('mongoose-permission'), {
    'administrate': ['create', 'read', 'update', 'delete'],
    'manage articles': ['publish', 'write'],
    'write': ['read'],
    'read': ['']
});
 
var User = mongoose.model('User', UserSchema);
 
var chris= new User({name: 'chris pi' ... });
 
chris.grant('administrate'); //Pass any number of permissions separated by ',' : chris.grant('read','write',...)
 
console.log(chris.can('administrate')); // true
console.log(chris.can('read')); // true
console.log(chris.can('write')); // false
console.log(chris.can('create')); // true
 
chris.revoke('administrate');
 
console.log(chris.can('administrate')); // false
console.log(chris.can('read')); // true
console.log(chris.can('write')); // false
console.log(chris.can('create')); // true
 
...
 
chris.grant('administrate','write');
console.log(chris.can('administrate')); // true
console.log(chris.can('read')); // true
console.log(chris.can('write')); // true
console.log(chris.can('create')); // true
 
...
 
//Revoking children if needed
chris.revoke('administrate', true);
console.log(chris.can('administrate')); // false
console.log(chris.can('read')); // false
console.log(chris.can('write')); // false => write need read, but lost by revoking children
console.log(chris.can('create')); // false