feat: wip casl policies (#334)

* feat: wip casl policies

* feat: add ability guard on pipeline resolvers

* fix: test

server/src/ability/handlers/comment-thread.ability-handler.ts

@@ -0,0 +1,42 @@
+import { PrismaService } from 'src/database/prisma.service';
+import { AbilityAction } from '../ability.action';
+import { AppAbility } from '../ability.factory';
+import { IAbilityHandler } from '../interfaces/ability-handler.interface';
+import { Injectable } from '@nestjs/common';
+
+@Injectable()
+export class ManageCommentThreadAbilityHandler implements IAbilityHandler {
+  constructor(private readonly prismaService: PrismaService) {}
+
+  async handle(ability: AppAbility) {
+    return ability.can(AbilityAction.Manage, 'CommentThread');
+  }
+}
+
+@Injectable()
+export class ReadCommentThreadAbilityHandler implements IAbilityHandler {
+  handle(ability: AppAbility) {
+    return ability.can(AbilityAction.Read, 'CommentThread');
+  }
+}
+
+@Injectable()
+export class CreateCommentThreadAbilityHandler implements IAbilityHandler {
+  handle(ability: AppAbility) {
+    return ability.can(AbilityAction.Create, 'CommentThread');
+  }
+}
+
+@Injectable()
+export class UpdateCommentThreadAbilityHandler implements IAbilityHandler {
+  handle(ability: AppAbility) {
+    return ability.can(AbilityAction.Update, 'CommentThread');
+  }
+}
+
+@Injectable()
+export class DeleteCommentThreadAbilityHandler implements IAbilityHandler {
+  handle(ability: AppAbility) {
+    return ability.can(AbilityAction.Delete, 'CommentThread');
+  }
+}